Skip to main content
Blink Documentation home page
Search...
⌘K
Login
Get Started
Get Started
Search...
Navigation
Triggers
Overview
Home
Getting Started
Agents
Workflows
Platform
Integrations
Case Management
Integrations
1Password
1Password Connect Server
Abnormal
Absolute
AbuseIPDB
Acronis
Active Directory On-Prem
Adaptive Shield
Adobe Cloud
ADP
Agari Phishing Response
Airlock
Airlock Digital
Akamai Client List
Akamai Identity Cloud Social
Alert Logic
AlgoSec Firewall Analyzer
Alienvault OTX
Alienvault USM
Anodot
Ansible
Anthropic
Anvilogic
Any Run
Apex One
ArcSight ESM
Ardoq
Area 1
Armis Centrix
Asana
Asset Panda
Astrix
Atlassian Crowd
Atlassian User Management
Atlassian User Provisioning
AuditBoard
auth0
Authentik
Authomize
Automox
AWS
AWS IAM Identity Center
Axonius
Azure
Azure Data Explorer
Azure DevOps
Azure Log Analytics
Azure Storage
BambooHR
Big Fix
BigPanda
Bitbucket
Bitdefender
Bitsight
Bitwarden
Black Duck
Black Kite
Blink
BlueCat Edge
BlueCat IPAM
BMC Remedy
Box
Brinqa
Bugcrowd
Cato Networks
Censys
Check Point Harmony
Check Point Infinity Events
Check Point Management
Check Point XDR/XPR
Checkmarx One
Checkmarx SAST
Chorus
Chronicle
Cisco Advanced Phishing Protection
Cisco Domain Protection
Cisco Identity Services Engine
Cisco Meraki
Cisco Talos
Cisco Umbrella
Cisco Webex
Claroty CTD
Claroty xDome
ClearPass
ClickHouse
ClickUp
Cloud Custodian
Cloudflare
Cloudflare R2
Cobalt.io
Compass
Confluence
Confluence Data Center
Coralogix
Coralogix Incident Management
Cortex XDR
Cortex Xpanse
Coupa Compass
CredStash
Cribl
CrowdStrike
CyberArk
Cybersixgill
CyCognito
Cyera
Cylance
Cymulate
Cyware CTIX
Darktrace
Dasera
Databricks
Datadog
DataSet
Delighted
Delinea
Dell iDRAC
Devo
Digital-Shadows
Discord
Docusign
Domo
Drata
Dropbox
Dropbox Business
Dropzone AI
druva
Duo
Duo Auth
Dynatrace
EasyVista
EchoTrail
Egnyte
Egnyte Secure Govern
Elasticsearch
Entro
Entrust Certificate Services
Ermetic
Exabeam
Exchange Online
Expel
F5
Falcon LogScale
Falcon Surface
Fastly
FireHydrant
Flare.io
Forcepoint DLP
Forescout
FortiGate
Freshservice
GCP
Gemini
Ghostwriter
Git
GitHub
GitLab
Glean
Gmail
Google Admin Console
Google Calendar
Google Chat
Google Cloud Identity
Google Docs
Google Drive
Google Forms
Google Looker
Google Meet
Google Sheets
Google Workspace
Grafana
Greenhouse
GreyNoise
Grip Security
GYTPOL
HackerOne
HackNotice
Halo PSA
Have I Been Pwned
HiBob
HubSpot
Hunters
Hybrid Analysis
Hyperproof
IBM CLoud
IBM NS1 Connect
IBM Security Verify
IBM X Force
Imperva
Incident.io
Infobip
Infoblox Cloud Services Portal
Intel Owl
Intercom
Intezer
IP API
IPinfo
IPWHOIS
Ironscales
Ivanti RiskSense
Jamf
JetBrains
JFrog
Jira
Jira Data Center
Joe Sandbox
JumpCloud
Kandji
Keeper Secrets Manager
Kenna Security
KnowBe4
KnowBe4 Events
Kubernetes
Lacework
Lark
LaunchDarkly
LimaCharlie
Linear
Litmos
Living Security
LogicMonitor
LogRhythm
Magnet One
Manage Engine ServiceDesk Plus
Mattermost
Maven
Microsoft Defender For Cloud
Microsoft Defender For Cloud Apps
Microsoft Defender For Endpoints
Microsoft Defender XDR
Microsoft Defender XDR
Actions
Triggers
Overview
Microsoft XDR Webhook Event
New Alert
Microsoft E-Discovery
Microsoft Entra ID
Microsoft Excel
Microsoft Graph
Microsoft Intune
Microsoft Office 365 Management Activity
Microsoft OneNote
Microsoft Outlook
Microsoft Purview
Microsoft Sentinel
Microsoft SQL Server
Microsoft Teams
Mimecast
MISP
Monday
MongoDB Atlas
MxToolbox
Neo4j
NetBox
Netography
Netskope
NetSPI
New Relic
Nexthink
Nightfall AI
NinjaOne
Notion
Nozomi Networks
Nuclei
Nucleus
Nutanix Hypervisor
Obsidian
Okta
OneDrive
OneLogin
OneTrust
Oort
OpenAI
OpenCTI
Opsgenie
OPSWAT
Oracle Cloud
Oracle HCM
Oracle NetSuite
Oracle PeopleSoft
Orca Security
OWASP ZAP
PagerDuty
Palo Alto Firewall
Palo Alto NGFW
Panther
Passwordstate
Pentera
Perception Point
PhishLabs
PhishLabs Incident Data
PhishLabs Open Web Monitoring
Pingdom
PingID
PingOne
PlexTrac
Plutora
PortSwigger
Postman
Postman SCIM
Power BI
PowerShell
Prisma Access
Prisma Cloud
Prisma Cloud CWP
Prometheus
Proofpoint
Proofpoint ITM
Proofpoint Protection Server
Proofpoint Security Awareness Training
Proofpoint TAP
Proofpoint TRAP
Pub-Sub
QRadar
Qualys
Rapid7
Rapid7 InsightIDR
Rapid7 InsightVM Cloud
Rapid7 Threat Command
Reco
Recorded Future
Recorded Future Triage Cloud
Red Hat IDM
Rippling
RSS
Rubrik
runZero
SafeBase
SafeBreach
Sage HR
SailPoint
SailPoint IdentityIQ
Salesforce
SAP Ariba
Sap Concur
SAP LeanIX
ScienceLogic
Securin
Securin VI
SecurityScorecard
Securonix
Seemplicity
Sekoia.io
SemGrep
SentinelOne
ServiceNow
SharePoint
Shodan
Shopify
Silverfort
Slack
Smartsheet
Snipe IT
Snowflake
Snyk
SolarWinds Information Service
SolarWinds Service Desk
SonarQube
Sophos
Split
Splunk
Splunk Observability
Splunk SOAR
Spur
StrongDM
Sumo Logic
Symantec EDR
Sysdig
Tableau
Tanium
TeamCity
TeamViewer
Telegram
Tempo
Tenable
Tenable Security Center
Terraform
Terraform Cloud
Tessian
TheHive
Thinkst Canary
Thomson Reuters
ThreatQuotient
Traliant LMS
Trellix Email Security
Trello
Trend Vision One
Twilio
UKG HR
Uptycs
URLScan
Varonis
Vault
Veeam Backup & Replication
Veracode
Verkada
Vertica
VirusTotal
VMware Carbon Black
VMware vSphere
Wazuh Server
WeChat
WhatsApp
WhoIs
WildFire
Wiz
Workday
Workspace ONE UEM
YesWeHack
Zendesk
Zero Networks
Zoom
Zscaler Internet Access
Zscaler Private Access
Triggers
Overview
Blink supports the following Microsoft Defender XDR Triggers:
Microsoft XDR Webhook Event
New Alert
Was this page helpful?
Yes
No
Update Incident
Microsoft XDR Webhook Event
⌘I
Assistant
Responses are generated using AI and may contain mistakes.
