Hi everyone, 
the new feature has a separate license or exists in P2 plan ?
What are the differences from previous actions that MDfE gave us in the past ? More proactive actions maybe ? more confidence about the probability of true positive attack ?

Does a security admin can audit - view changes made automatically by the service ? In order to fine tune them, or even disable-delete them after the containment - remediation of the attack ?

Thanks,
Panos