Defender for Endpoint AMA: The next evolution of automatic attack disruption

Great question. From a licensing perspective, this specific feature is available for MDE P2, Defender for Business and included in the ME5. For attack disruption all up, it is included in E5. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/defender-endpoint-plan-1-2?view=o365-worldwide, To start benefitting from this feature, ensure that your devices are onboarded to MDE and your OS version is updated from at least March 2023. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/respond-machine-alerts?view=o365-worldwide#contain-user-from-the-network