Update configure-automated-investigations-remediation.md

This commit is contained in:
Denise Vangel-MSFT
2020-05-18 16:07:06 -07:00
parent 20e46ff42e
commit f443bbe825

View File

@ -33,18 +33,16 @@ Automated investigation and remediation capabilities mimic the ideal steps that
[Learn more about automated investigation and remediation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/automated-investigations). [Learn more about automated investigation and remediation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/automated-investigations).
## Configure automated investigation and remediation capabilities
To configure automated investigation and remediation, you turn on the features, and then you set up device groups. To configure automated investigation and remediation, you turn on the features, and then you set up device groups.
### Turn on automated investigation and remediation ## Turn on automated investigation and remediation
1. As a global administrator or security administrator, go to the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) and sign in. 1. As a global administrator or security administrator, go to the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) and sign in.
2. In the navigation pane, choose **Settings**. 2. In the navigation pane, choose **Settings**.
3. In the **General** section, select **Advanced features**. 3. In the **General** section, select **Advanced features**.
4. Turn on both **Automated Investigation** and **Automatically resolve alerts**. 4. Turn on both **Automated Investigation** and **Automatically resolve alerts**.
### Set up device groups ## Set up device groups
1. In the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)), on the **Settings** page, under **Permissions**, select **Device groups**. 1. In the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)), on the **Settings** page, under **Permissions**, select **Device groups**.
2. Select **+ Add machine group**. 2. Select **+ Add machine group**.