Threat investigation and response capabilities
When it comes to threat investigation and threat response in MDO, Microsoft provides a suite of best-in-class tools, with things such as threat trackers, Threat Explorer, real-time detection, and attack simulation training, which helps train users to learn the dos and don'ts of mail security. With that said, we'll break this section down into the following categories:
- Threat trackers
- Threat Explorer (real-time detection)
- Attack simulation training
You'll find these sections under Email & collaboration in the security.microsoft.com portal, as shown in the following screenshot:
Figure 8.7 – Email & collaboration
Let's dive into the first category: threat trackers.
Threat trackers
Threat trackers are specific views about trending malware campaigns, broken into trending campaigns and noteworthy campaigns, as well as Saved or Tracked queries, which allow...
