Automated Investigation and Response within Microsoft 365

Liam Cleary

CEO | Microsoft MVP | Microsoft Certified Trainer

As an administrator within Microsoft 365, you are undoubtedly used to the many alerts you might receive. Some of these might be for permissions and access, support issues, and some may be security problems within the tenant. However, often there can be so many of them that security issues can slip through, causing even more problems within the Microosftb365 tenant.

When security alerts are triggered, it is the security team's job to examine them and take remediation steps. Luckily Microsoft 365 provides Automated investigation and response (AIR) capabilities to help automate the investigation processes in response to threats that exist today.

In this session, we will look at the Automated investigation and response (AIR) features and how you can benefit from them as a system administrator and organization.