“Investigation priority score increase” Policy to be retired

The "Investigation priority score increase" policy in Microsoft Defender for Cloud Apps will be retired between June and July 2024 due to high false positives and limited value. Administrators should use the Advanced Hunting query as an alternative. According to the post on M365 Admin, the retirement of this policy is a result of limited value it provides due to high false positives alert. Service Operations Center (SOC) administrators and analysts will no longer be able to access, manage and use this policy alert in "Microsoft Defender for Cloud Apps" after the change is implemented. The retirement will be carried out gradually between June and July 2024. Organizations who are using this policy type are advised to use the Advanced Hunting query, as an alternative. Using this query will help in detecting risky users. Microsoft is committed to delivering high-quality, reliable security solutions that meet the needs and expectations of its users and will continue to improve its services.

The post "Investigation priority score increase" Policy to be retired appeared first on M365 Admin.