Recent DiscussionsMost RecentNewest TopicsMost LikesSolutionsTagged:TagRe: Alerts from MDCA are not shown in the Microsoft 365 Defender PortalHello, Risky sign-in alerts trigger from Azure AD Identity Protection (and also surface in MDCA). AAD Identity Protection alerts in M365D are now in Private Preview and very soon will be available in public preview. Thanks, IdanRe: Notifications of new MTP incidents? thehadricus Thank you for these inputs! We are working on this functionality these days, we will have it open in the coming months. If you are MTP private preview customer, please let me know so we can review this feature together once released. Thanks, Idan
Recent Blog ArticlesNewest TopicsMost LikesTagged:TagBoost your detection and response workflows with alert tuning Use alert tuning in Microsoft 365 Defender to detect and respond to potential security threats even more effectively. Investigate incidents more effectively with the new attack story view in Microsoft 365 Defender Introducing attack story view in Microsoft 365 Defender - more effective investigation to stop breaches faster. Identity Protection alerts now available in Microsoft 365 Defender Identity Protection alerts are now part of incidents along with alerts from the other security domains and can be reviewed directly in Microsoft 365 Defender for a full view of the end-to-end attack....The power of incidents in Microsoft 365 Defender Incidents in Microsoft 365 Defender are powerful tools allowing SecOps to triage, investigate and response to cyber-attacks in one place. Incidents provide the full attack picture due to advanced s...New and improved incident queue With the new incident queue, you can find incidents with specific names, IDs, or assets, and you can also specify a custom time range, and easily see the applied filters, and much more. Assign incidents and alerts to someone else To control and manage incidents and alerts in the organization, sometimes you would need to assign them to a specific analyst. Now you can do that right from the incident queue in Microsoft 365 Defen...New Incident Graph view in Microsoft 365 Defender The new incident graph view in Microsoft 365 Defender allows you to view the full story of an attack. New alert page for Microsoft 365 Defender incident detections! Microsoft 365 Defender automatically expands incidents to tell the full story of an attack. It does this by leveraging the unique position which enables it to look across workloads and automaticall...Easily find anomalies in incidents and alerts Microsoft 365 security Home page and Incidents page now include a trend graph of all the incidents and alerts over the last 24 hours. This enables you to easily find spikes in your environment and ...Azure Sentinel and Microsoft 365 Defender incident integration Harness the breadth and depth of integrated SIEM and XDR with new Microsoft 365 Defender integration and Sentinel
MicrosoftMicrosoftMicrosoftMicrosoft
