Microsoft 365 Defender â Investigating an Incident>
Microsoft – John Barbare
This is John Barbare and I am a Sr. Customerâ¯Engineer at Microsoft focusing on all things in the Cybersecurity space. This is the second part of the series of Microsoft 365 Defender as you can view the first part here. In this blog I will go over the new unified Microsoft 365 Defender Security Portal and go into detail of investigating an incident, the correlation of alerts, and a detailed look at what Automated Investigation does and how it can help your organization. With that said, lets jump into Microsoft 365 Defender and look at a real incident and see how Microsoft 365 Defender can work for your organization.
Link: https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/microsoft-365-defender-investigating-an-incident/ba-p/2205619