• 3 minutes

The Settings page lets you configure related Microsoft Defender products. The specific settings for the Defender products will be discussed in the related learning content. The primary setting for Microsoft Defender XDR is the notifications email configuration.

Types of Microsoft Defender portal email notifications

When you set up email notifications, you can choose from two types, as described in the following table:

Notification type	Description
Incidents	When new Incidents are created
Threat Analytics	When new Threat Analytic reports are created

Manage Incident email notifications

To view, add or edit Incident email notification settings for your organization, follow these steps:

In the navigation pane, select Settings, and then select Microsoft Defender XDR. Then, select Email notifications.

Next, select Incidents

To add a new notification:

• Select Add incident email notification.
• Enter a name and description, then next.
• Select device and alert criteria, then next.
• Enter the recipients email address, then next.
• Select the Create rule button.

Manage Threat Analytics email notifications

To view, add or edit Threat Analytics email notification settings for your organization, follow these steps:

In the navigation pane, select Settings, and then select Microsoft Defender XDR. Then, select Email notifications.

Next, select Threat Analytics

To add a new notification:

• Select Create a notification rule.
• Enter a name and description, then next.
• Select threat analytics criteria, then next.
• Enter the recipients email address, then next.
• Select the Create rule button.