Automated Investigation & Response
Automated Investigation & Response helps protect mail and collaboration experiences from phishing, malware, malicious links, suspicious users, and related security threats.
What this feature does
Automated Investigation & Response helps protect mail and collaboration experiences from phishing, malware, malicious links, suspicious users, and related security threats.
It sits in Microsoft Defender under the Defender workload. Use the licence signal to see where it is included, then open a licence map to understand how it fits with nearby capabilities.
Feature profile
- Product
- Microsoft Defender
- Workload
- Defender
- Category
- Defender
- Status
- active
Related capabilities
Defender for Endpoint Plan 2
Endpoint detection and response, threat analytics, and advanced hunting.
Safe Links
Safe Links rewrites and checks links at click time to help protect users from malicious URLs in email and collaboration experiences.
Alert Policies
Alert Policies let administrators define conditions that generate alerts when important security, compliance, or activity events occur.
Audit (standard)
Audit (standard) records and exposes user, administrator, and service activity so teams can investigate changes, access, and compliance events.
Defender for Office 365 Plan 2
Defender for Office 365 Plan 2 helps protect mail and collaboration experiences from phishing, malware, malicious links, suspicious users, and related security threats.
Attack Simulation Training
Attack Simulation Training helps protect mail and collaboration experiences from phishing, malware, malicious links, suspicious users, and related security threats.