Microsoft 365 Defender

Microsoft 365 Defender automatically investigates all the incidents' supported events and suspicious entities in the alerts, providing you with information about the important emails, files, processes, services, IP Addresses, and more. This helps you quickly detect and block potential threats in the incident.

• Investigate incidents in Microsoft 365 Defender

• Manage incidents in Microsoft 365 Defender

• Investigate incidents in Microsoft Defender for Endpoint