Automated Investigation and Response
Upgraded to Defender for 365 P2 based on the idea of setting automated responses to certain alerts. That's how it was described. Now I'm trying to enable and configure it. The documentation has bounced me around 20 different articles for XDR, Defender Enterprise, Defender for Business... I do not see anywhere to configure the automation in Defender. One doc points me https://security.microsoft.com/securitysettings/endpoints/integration for making sure it's enabled. when I open this, and go down to Automation, it's simply an empty list of device groups. We don't use Device groups - we don't use Defender Endpoint. Has anyone configured this in a non-XDR environment? What I'm encountering and what was advertised seem very different...
Attack Simulator: Company Logo not showing on landingspage
Hi All, I have the following issue: the uploaded company logo (PNG or JPEG) is not shown on the landings page once the user clicks on the phishing link. See the attached screenshot; the image source is empty. I tried this multiple times with different logos and landingpages, but the results are the same. During the upload of the logo, there is no confirmation that the logo has been uploaded successfully.... You only click next during the creation of the simulation..... When clicking on the preview-button (during simulation creation), the logo is shown.
Adding Targeted Users/Groups in Attack Simulator
Is there a setting that may have changed recently or needs to be changed that enables filtering by groups when creating a simulation. I am unable to browse our groups in our organization any longer, I can choose from other options like City, Departments, Titles, etc. but the AD groups do not populate any longer in this list when trying to add Target Users. Thank you, Jerid
