Microsoft Defender for Identity AMA

Recently, Microsoft Defender for Identity announced remediation action it can take on users. Ultimately, with Microsoft 365 Defender, each product will provide it’s own, unique-set of remediation capabilities, Microsoft Defender for Office 365 allows you to move emails to certain folders, Microsoft Defender for Identity provide the capability for disabling a user and Microsoft Defender for Endpoint can isolate devices. All the remediation capabilities can be triggered from any signals - alerts, activities or custom detections, regardless of what was the product that was triggering them. Effectively – MDI signals can trigger any of the other defender actions. You can read more about it here: https://docs.microsoft.com/en-us/microsoft-365/security/defender/m365d-remediation-actions?view=o365-worldwide