In development
Microsoft Defender for Office 365: Additional actions include submit, allow/block, and trigger AIR from Advanced Hunting.
Why it matters: Upcoming change
SoC will be able to do submissions and tenant level block and trigger investigation actions from Advanced Hunting
Affected: Microsoft Defender for Office 365