Update configure-automated-investigations-remediation.md

This commit is contained in:
Denise Vangel-MSFT
2020-05-18 16:07:06 -07:00
parent 20e46ff42e
commit f443bbe825

View File

@ -33,18 +33,16 @@ Automated investigation and remediation capabilities mimic the ideal steps that
[Learn more about automated investigation and remediation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/automated-investigations).
## Configure automated investigation and remediation capabilities
To configure automated investigation and remediation, you turn on the features, and then you set up device groups.
### Turn on automated investigation and remediation
## Turn on automated investigation and remediation
1. As a global administrator or security administrator, go to the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) and sign in.
2. In the navigation pane, choose **Settings**.
3. In the **General** section, select **Advanced features**.
4. Turn on both **Automated Investigation** and **Automatically resolve alerts**.
### Set up device groups
## Set up device groups
1. In the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)), on the **Settings** page, under **Permissions**, select **Device groups**.
2. Select **+ Add machine group**.