Microsoft Defender for Office 365: Auto-Remediation of Malicious Entity Clusters Identified in Automated Investigation and Response (AIR)

Originally posted by Microsoft Nov 30, 2023 Uncategorized 0 Comments

The feature will expand upon the automated investigation and response (AIR) by enabling AIR to automatically remediate malicious entity clusters. AIR currently recommends actions for SecOps to approve or decline and this enhancement will allow customers to enable auto-remediation to allow AIR to act on recommendations and soft delete messages included in a malicious URL or malicious file cluster.

Product	Microsoft Defender for Office 365
Release phase	General Availability
Release date	June CY2024
Platform	Web
Cloud Instance	Worldwide (Standard Multi-Tenant)
Created	2023-11-28
Roadmap ID	186576
Roadmap Link	https://www.microsoft.com/microsoft-365/roadmap?featureid=186576