Define Filter and Aggregation criteria in Microsoft Defender integration
ServiceNow Documentation
·
Aug 06, 2026
·
video
Shows how to define filter and aggregation criteria to control which Microsoft Defender incidents generate new security incidents in ServiceNow and whether incoming incidents should be merged into existing ones.#servicenowcommunity #servicenowdemo #securityincidentresponse #microsoftdefender This video was recorded in the Australia release. For more information about defining filter and aggregation criteria, see: ServiceNow product documentation: Define filter and aggregation criteria: https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-def-filtering-and-aggregation.htmlServiceNow Training and Certification: http://www.servicenow.com/services/training-and-certification.html ServiceNow Community: https://community.servicenow.com/community ServiceNow TechBytes Podcast: https://www.servicenow.com/community/community-resources/servicenow-techbytes-podcasts/ta-p/2305455 For general information about ServiceNow, visit: http://www.servicenow.com/
https://www.youtube.com/watch?v=wmy3ExT8dXc