Microsoft Defender for Office 365: Updates to post-delivery detections and investigations
Microsoft Defender for Office 365 is introducing new alert policies related to post-delivery detections as well as enhancements to the Automated Investigation & Response (AIR) playbooks associated with them.
In addition, we are modifying the severity classification for six default alert policies to better align the alerts with their impact on your organization.