Event banner

Microsoft Defender for Identity AMA

Event Ended
Wednesday, Jun 29, 2022, 09:00 AM PDT
In-Person

Event details

We are very excited to announce our Microsoft Defender for Identity AMA!   An AMA is a live text-based online event similar to a “YamJam” on Yammer or an “Ask Me Anything” on Reddit. This AMA giv...
Trevor_Rusher
Updated Jun 29, 2022
microsoft defender for identity
batuhank's avatar
batuhank
Copper Contributor
Jun 29, 2022
Are you going to have a workflow for MDI exclusions? Such as, SOC Analyst gives a verdict that an alert is false positive and suggests exclusion , it goes to a group of security engineer who analyses the overall impact and decides on exclusion or not?
  • Or Tsemah's avatar
    Or Tsemah
    Icon for Microsoft rankMicrosoft
    Jun 29, 2022
    Currently, Incidents are meant to be assigned to one or more people so they can reach a conclusion. You can use a similar approach to reach a conclusion with regards to exclusions too.
Date and Time
Jun 29, 20229:00 AM - 10:00 AM PDT