Microsoft Defender for Office 365: Auto-Remediation of Malicious Entity Clusters Identified in Automated Investigation and Response (AIR)
Microsoft Defender for Office 365 is set to receive an update that will enhance its automated investigation and response (AIR) feature with automatic remediation capabilities. This update will allow AIR to take action on SecOps recommendations by automatically soft-deleting messages containing malicious URLs or files. At the moment, AIR only makes recommendations to SecOps, who then have to approve or decline them. This update is expected to be released in June CY2024 and will be available on the web cloud platform worldwide. The enhancement is designed to further improve the capability of Microsoft Defender for Office 365 in protecting users from malicious entities.
The article can be found on M365 Admin.
Published on:
Learn more
Related posts
Microsoft Defender for Office 365: Enhanced multiple action experience from Threat explorer
Microsoft Defender for Office 365 has introduced enhancements to its Threat explorer feature, enabling SecOps personnel to take multiple actio...
Microsoft Defender for Office 365: AIR Initiated Remediation Logging
Microsoft Defender for Office 365 has introduced an update that allows for the logging of remediations generated by Automated Incident Respons...
Microsoft Defender for Office 365: User submission automatic feedback response
Microsoft Defender for Office 365 now offers the automatic feedback response feature which allows organizations to automatically respond to en...
Microsoft Defender for Office 365: User Submission Automatic Feedback Response
Organizations can now benefit from the user submission automatic feedback response in Microsoft Defender for Office 365, which automatically r...
Microsoft Defender for Office 365: False positive email release from Quarantine through threat explorer, email summary panel, and email entity page take action
The Microsoft Defender for Office 365 now enables SecOps to manage false positives and release quarantined messages to the inbox via the Threa...
Microsoft Defender for Office 365: Teams Security
Good news for Microsoft Teams users! Microsoft Defender for Office 365 is set to provide enhanced security operations and protection for Teams...
Introducing Threat Explorer V3 by Microsoft Defender for Office 365
Microsoft Defender for Office 365 is now introducing the latest version of Threat Explorer- Version 3. This tool has been an integral part of ...
Microsoft Defender for Threat Intelligence
In this episode, cybersecurity triumphs over threat intelligence as we delve into the topic of Microsoft Defender. Joined by guests Rijuta Kap...
Advanced Threat Hunting with Microsoft 365 Defender
In this podcast episode, Michael and Michael dive into the world of advanced threat hunting using Microsoft 365 Defender. Joining the conversa...