Defender ATP Demo - not seeing Auomated Investigations...? OS is not supported

Thanks Benny,

I'm just reviewing some of the details that the Investigation goes thru + the fact that it's taking quite some time to run thru all the logs (having said that this is a Test VM in Hyper-V on my laptop - so the speed is not great - now strongly considering adding a second SSD for VM's to run from)

It might be useful to have an Alert at the Users end "Your PC has detected some potentially malicous files and is now running an Automated Investigation by Windows Defender ATP" ?? 

OR - once we can add an option to automatically isolate this - "Your PC has detected some potentially malicous files and has now been placed in Quarantine pending an Automated Investigation by Windows Defender ATP - you will only be able to use Outlook & Skype until complete"

Ideally this would still allow Quick Assist? the Message could be customized with the Corporate logo + Help Desk contact details & a link to start Quick Assist? 

Thanks Benny,  We got that sorted yesterday and now working a treat.

Having said that - it seems that the "Automated Investigation" is stalling even though I can clearly see that Defender on the end point has already Quarantined/Deleted the malicious file?

Is this something that needs to be troubleshooted? Any advice?