Chapter 9: Threat Intelligence and Tracking
As a Microsoft 365 administrator, it is important to dedicate time and effort to analyzing and responding to any events or alerts that are detected and shown in the Microsoft 365 Security & Compliance Center. The key to maintaining a safe and secure environment is to be proactive in monitoring your Microsoft 365 tenant.
The threat investigation and response capabilities within Microsoft 365 enable administrators to maximize the effectiveness of the features that they enable within their Microsoft 365 environment. This means that you can diligently protect your users from suspicious behavior and malicious actors.
In this chapter, you will learn about the threat management dashboard and Threat Explorer, as well as how to view and interpret incidents. You will also learn how to view reports and threat trackers, manage quarantined messages and files, and use the Office 365 attack simulator to conduct tests on your environment.
We...