Forum Discussion
Dean_Gross
Jul 14, 2021Silver Contributor
Unsupported alerts
Can anyone tell me why the Investigation state for some alerts from MCAS show up in M365 Defender as "unsupported alerts" ?
Unsupported alert type alert status means, that automated investigation capabilities cannot pick up that alert to run an automated investigation. You can however investigate those alerts manually. See more here: Review alerts in Microsoft Defender for Endpoint | Microsoft Learn
1 Reply
Sort By
- MartinLaabsCopper Contributor
Unsupported alert type alert status means, that automated investigation capabilities cannot pick up that alert to run an automated investigation. You can however investigate those alerts manually. See more here: Review alerts in Microsoft Defender for Endpoint | Microsoft Learn