AIR
Microsoft Defender for Office 365 is equipped with efficient AIR technology, aimed at streamlining tasks for your security operations team. When alerts are triggered, the team must diligently review and address them. With high volumes of alerts, this can be daunting, which is why automation proves beneficial.
AIR enhances your team’s productivity by triggering automatic investigations for known threats. It proposes appropriate remedial actions, which are subject to your team’s endorsement, enabling a swift reaction to threats. With AIR, your team can concentrate on urgent issues without overlooking critical alerts.
A high-level overview of AIR
Let’s review at a high level how automated investigations work, from what triggers them to what occurs once these are active, as well as the benefits we can gain from them:
- First, an automated investigation is prompted in two major ways:
- A security analyst manually starts an automated investigation through...
