What part of Microsoft 365 security center do you use to identify users and devices affected by alert?

Experience Level: Junior
Tags: Microsoft Defender

Answer

Use Incidents. 
The additional tabs for an incident are:

Alerts - All the alerts related to the incident and their information.

Devices - All the devices that have been identified to be part of or related to the incident.

Users - All the users that have been identified to be part of or related to the incident.

Mailboxes - All the mailboxes that have been identified to be part of or related to the incident.

Investigations - All the automated investigations triggered by alerts in the incident.

Evidence and Response - All the supported events and suspicious entities in the alerts of the incident.

Summary - A quick overview of the impacted assets associated with alerts.
Azure - Compliance for beginners
Azure - Compliance for beginners

Are you learning Azure Cloud ? Try our test we designed to help you progress faster.

Test yourself
Azure - Security for beginners
Azure - Security for beginners

Are you learning Azure Cloud ? Try our test we designed to help you progress faster.

Test yourself
Azure - Governance for beginners
Azure - Governance for beginners

Are you learning Azure Cloud ? Try our test we designed to help you progress faster.

Test yourself
SC-900: Microsoft Security, Compliance, and Identity Fundamentals preparation
SC-900: Microsoft Security, Compliance, and Identity Fundamentals preparation

Are you learning Azure Cloud ? Try our test we designed to help you progress faster.

Test yourself

Chat

Oh, the operator is not available. Leave us your comments. We will answer all your questions as soon as possible.

Comments

Anonymous
Καλησπέρα.
Anonymous
the infinteis -3/15 so 1triition / infinet
Anonymous
e
Anonymous
<a href="https://inspirum.pl "
Anonymous
[url]https://inspirum.pl[/url]
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e
LaceJaguar65
e