Jul 14 2021 04:01 AM
Can anyone tell me why the Investigation state for some alerts from MCAS show up in M365 Defender as "unsupported alerts" ?
Feb 06 2023 03:57 AM
Solution
Unsupported alert type alert status means, that automated investigation capabilities cannot pick up that alert to run an automated investigation. You can however investigate those alerts manually. See more here: Review alerts in Microsoft Defender for Endpoint | Microsoft Learn
Feb 06 2023 03:57 AM
Solution
Unsupported alert type alert status means, that automated investigation capabilities cannot pick up that alert to run an automated investigation. You can however investigate those alerts manually. See more here: Review alerts in Microsoft Defender for Endpoint | Microsoft Learn