Analyzing your Microsoft Defender ATP data in real-time in ELK using the new streaming API

https://medium.com/@maarten.goet/analyzing-your-microsoft-defender-atp-data-in-real-time-in-elk-using-the-new-streaming-api-c435d2943605