logo

NJP

Define Filter and Aggregation criteria in Microsoft Defender integration

ServiceNow Documentation · Aug 06, 2026 · video

Shows how to define filter and aggregation criteria to control which Microsoft Defender incidents generate new security incidents in ServiceNow and whether incoming incidents should be merged into existing ones.#servicenowcommunity #servicenowdemo #securityincidentresponse #microsoftdefender This video was recorded in the Australia release. For more information about defining filter and aggregation criteria, see: ServiceNow product documentation: Define filter and aggregation criteria: https://www.servicenow.com/docs/r/security-management/security-incident-response/ms-def-filtering-and-aggregation.htmlServiceNow Training and Certification: http://www.servicenow.com/services/training-and-certification.html ServiceNow Community: https://community.servicenow.com/community ServiceNow TechBytes Podcast: https://www.servicenow.com/community/community-resources/servicenow-techbytes-podcasts/ta-p/2305455 For general information about ServiceNow, visit: http://www.servicenow.com/

View original source

https://www.youtube.com/watch?v=wmy3ExT8dXc