Forum Discussion
Defender ATP Demo - not seeing Auomated Investigations...? OS is not supported
- May 02, 2018
It is not supported as we require Windows 10, version 1803 (spring creators update).
We are working on enhancing the automation capabilities to also automate isolation, so it is on the road map (I can't commit to when just yet).
It is not supported as we require Windows 10, version 1803 (spring creators update).
We are working on enhancing the automation capabilities to also automate isolation, so it is on the road map (I can't commit to when just yet).
Thanks Benny, We got that sorted yesterday and now working a treat.
Having said that - it seems that the "Automated Investigation" is stalling even though I can clearly see that Defender on the end point has already Quarantined/Deleted the malicious file?
Is this something that needs to be troubleshooted? Any advice?
- Benny LakunishokMay 02, 2018Former Employee
Can you give some more details as to what do you mean by stalling?
- David CaddickMay 02, 2018Iron Contributor
Hi Ben, I have an alert for:
"Windows Defender AV detected 'Tiggre' malware" that has now been running for 2h 45mins...?- Benny LakunishokMay 02, 2018Former Employee
I need to get some more details on why has it been running so long, is the investigation pending as it is waiting for the machine? waiting for a pending action approval?
Can you check the log and see what is the latest action it is performing or pending?