deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-05 09:07:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Update manage-auto-investigation.md

Browse Source
This commit is contained in:
Denise Vangel-MSFT 2021-01-28 16:17:37 -08:00
parent c87f767ca1
commit 18183c5337
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
windows/security/threat-protection/microsoft-defender-atp/manage-auto-investigation.md
View File

@ -96,7 +96,7 @@ If you’ve determined that a device or a file is not a threat, you can undo rem
## Automation levels, automated investigation results, and resulting actions
The following table summarizes automation levels, possible results of automated investigations, and what to do in each case.
Automation levels affect whether certain remediation actions are taken automatically or only upon approval. Sometimes your security operations team has additional steps to take, depending on the results of an automated investigation. The following table summarizes automation levels, results of automated investigations, and what to do in each case.
|Device group setting | Automated investigation results | What to do |
|:---|:---|:---|
@ -117,3 +117,7 @@ In Microsoft Defender for Endpoint, all verdicts are tracked in the [Action cent
- [Learn about live response capabilities](live-response.md)
- [Proactively hunt for threats with advanced hunting](advanced-hunting-overview.md)
- [Address false positives/negatives in Microsoft Defender for Endpoint](defender-endpoint-false-positives-negatives.md)
## See also
- [Overview of automated investigations](automated-investigations.md)