Skip to content

Review and Respond to Security Incidents and Alerts in Microsoft 365 Defender

How to work the incident queue in Microsoft 365 Defender: triaging and correlating alerts, investigating affected users and devices, using automated investigation and response, and closing incidents with the right classification.

Review and Respond to Security Incidents and Alerts in Microsoft 365 Defender