Microsoft is closing the legacy Microsoft Threat Intelligence portal on August 1, leaving security teams only days to verify that their investigation workflows survived the move. Existing Defender Threat Intelligence customers can continue using the current product experience until the cutoff. Microsoft says all Microsoft Threat Intelligence capabilities are now available through the Defender portal, where they support Defender XDR and Microsoft Sentinel workflows. Confirm that each account can reach the Intel profiles, Intel explorer, Intel projects and entity-enrichment features and open its assigned projects. Microsoft continues to publish Defender Threat Intelligence API documentation, but the page still lists an active Defender Threat Intelligence Portal license and API add-on as prerequisites.