The DisruptionAndResponseEvents table, now available in advanced hunting
The DisruptionAndResponseEvents table, now available in advanced hunting, contains information about automatic attack disruption events in Microsoft Defender XDR. These events include both block and policy application events related to triggered attack disruption policies, and automatic actions that were taken across related workloads. Increase your visibility and awareness of active, complex attacks disrupted by attack disruption to understand the attacks' scope, context, impact, and actions taken.
Terms in this update
This is in the weekly digest for week 40 · What changed this week? →
More Defender XDR updates
Identity Security dashboard and Coverage & Maturity
Integrated Security Operations Center (ISOC) in Microsoft Defender
AI agent posture risk in Microsoft Defender
Real-time protection for Microsoft Agent 365 tooling servers
The Domain investigation page allows you to investigate an Active Directory domain
Threat detection for Microsoft Agent 365 agents
Text by Microsoft, from Microsoft's documentation. Features and dates may change. Terms and the timeline are added by 365Fanatic.
