Update automated-investigations.md

This commit is contained in:
Denise Vangel-MSFT 2020-08-10 11:00:32 -07:00
parent 044e51be7b
commit 69140b5b7d

View File

@ -75,7 +75,7 @@ You can configure the following levels of automation:
|**Full - remediate threats automatically** | All remediation actions will be performed automatically.<br/><br/>*This is the default setting for Microsoft Defender ATP tenants created on or after August 16, 2020.*| |**Full - remediate threats automatically** | All remediation actions will be performed automatically.<br/><br/>*This is the default setting for Microsoft Defender ATP tenants created on or after August 16, 2020.*|
|**Semi - require approval for core folders remediation** | An approval is required on files or executables that are in the operating system directories such as Windows folder and Program files folder. <br/><br/> Files or executables in all other folders will automatically be remediated if needed.| |**Semi - require approval for core folders remediation** | An approval is required on files or executables that are in the operating system directories such as Windows folder and Program files folder. <br/><br/> Files or executables in all other folders will automatically be remediated if needed.|
|**Semi - require approval for non-temp folders remediation** | An approval is required on files or executables that are not in temporary folders. <br/><br/> Files or executables in temporary folders, such as the user's download folder or the user's temp folder, will automatically be remediated if needed.| |**Semi - require approval for non-temp folders remediation** | An approval is required on files or executables that are not in temporary folders. <br/><br/> Files or executables in temporary folders, such as the user's download folder or the user's temp folder, will automatically be remediated if needed.|
|**Semi - require approval for any remediation** | This is the default automation level.<br/><br/> An approval is needed for any remediation action. | |**Semi - require approval for any remediation** | An approval is needed for any remediation action. <br/><br/>*This is the default setting for Microsoft Defender ATP tenants created prior to August 16, 2020.*|
|**No automated response** | Devices do not get any automated investigations run on them. | |**No automated response** | Devices do not get any automated investigations run on them. |
### A few points to keep in mind ### A few points to keep in mind