Merge pull request #126 from MicrosoftDocs/air-ga

update version for airs
This commit is contained in:
jcaparas 2019-05-08 11:25:41 -07:00 committed by GitHub
commit ff7dd6c238
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -34,8 +34,8 @@ The Automated investigations list shows all the investigations that have been in
Entities are the starting point for Automated investigations. When an alert contains a supported entity for Automated investigation (for example, a file) that resides on a machine that has a supported operating system for Automated investigation then an Automated investigation can start.
>[!NOTE]
>Currently, Automated investigation only supports Windows 10, version 1803 or later.
>Some investigation playbooks, like memory investigations, require Windows 10, version 1809 or later.
>Currently, Automated investigation only supports Windows 10, version 1709 or later.
>Some investigation playbooks, like memory investigations, require Windows 10, version 1709 or later.
The alerts start by analyzing the supported entities from the alert and also runs a generic machine playbook to see if there is anything else suspicious on that machine. The outcome and details from the investigation is seen in the Automated investigation view.