Security alert classificationsįollowing proper investigation, all Defender for Identity security alerts can be classified as one of the following activity types: Link alert to another incident - link an alert to a new existing incidentįor more information about alerts, see Investigate alerts in Microsoft 365 Defender. You can also add a comment here.Įxport - download a detailed Excel report for analysis Manage alert - change the alert's status, assignment, and classification. This the chain of events related to this alert in chronological order, and other important information related to the alert. Defender for Identity and NNR (Network Name Resolution)Įach Defender for Identity security alert includes an Alert story.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |