-
During your onboarding process, the Mandiant Support team will set up the account of your organization and establish all user accounts and access privileges. The profile page of your organization contains information about the Subscription p...
-
Last Updated: 05/27/2026
in APIs
Overview
In this document, we're providing common ways to use the Digital Threat Monitoring (DTM) API. The examples here use the CURL command, but you could also use Postman or your favorite API tool.
The maximum number of API reque...
-
When you first log in to the MD Portal, you will see the Dashboard. The Dashboard provides real-time threat information, protection status, and coverage information for all your network and endpoint devices. The Dashboard page is divided into thre...
-
Last Updated: 05/27/2026
One of the first things you will need to do is to add users, typically the analysts in your security operations center and grant them the permissions they need to do their job. To add a new user: You can add users from the User Management pa...
-
MD uses the Announcements page to communicate important information to your team. These communications include standard announcements, blog posts, Intel, and highlights related to current threats or attacks. Only Mandiant MD users with Team Adm...
-
The following definitions are specific to the Managed Defense (MD) topics in this documentation portal. Term Description Supported Technology Products or subscriptions supported by MD Security Event(s) An observable occurrenc...
-
A Notification Profile is how you link Monitors or Monitor Groups to a specific Notification Format and how you define the notification interval. A Notification Profile is also required to receive automatic notifications if a Job for a Monitor err...
-
The Notification Format defines how you want the platform to notify you when an alert is generated by Monitor Actions or when a Monitor errors.
There are three types of notification formats available:
Email : Sends the notifi...
-
You can group Monitors together into a Monitor group, which helps you to organize and administer Monitors. For example, you can create a Monitor group that is built for a particular use case (e.g., DLP) or that delineates responsibility (e.g., Net...
-
The AEDA Configuration page may contain a Disconnected Monitors section. This section is only displayed if a Sequence or Evaluation that is used in a Monitor has been edited and if some monitors are disconnected. The Disconnected Monitor s...