Automatic attack disruption can now isolate compromised devices from the network…
Automatic attack disruption can now isolate compromised devices from the network when high-confidence incident analysis indicates the device is being used as an active foothold. Isolation blocks attacker communication and lateral movement while keeping the device connected to security services. The action is time-limited, scoped to devices involved in the incident, and can be released by security operators at any time. Learn more
This is in the weekly digest for week 40 · What changed this week? →
More Defender XDR updates
Identity Security dashboard and Coverage & Maturity
Integrated Security Operations Center (ISOC) in Microsoft Defender
AI agent posture risk in Microsoft Defender
Real-time protection for Microsoft Agent 365 tooling servers
The Domain investigation page allows you to investigate an Active Directory domain
Threat detection for Microsoft Agent 365 agents
Text by Microsoft, from Microsoft's documentation. Features and dates may change. Terms and the timeline are added by 365Fanatic.
