Microsoft Defender for Office 365: Additional actions include submit, allow/block, and trigger AIR from Advanced Hunting.

SoC will be able to do submissions and tenant level block and trigger investigation actions from Advanced Hunting

Affected: Microsoft Defender for Office 365

Related changes

• Microsoft Teams integration with Microsoft Defender for Office Tenant/Allow Block List for domains · Allow
• Microsoft Defender for Office 365: False positive email release from Quarantine through threat explorer, email summary panel, advanced hunting, and custom detection email entity page take action · Advanced
• Microsoft Defender for Office 365: Admins can block external users in Microsoft Teams from Defender Portal · Block
• Microsoft Defender for Office 365: Localized Default Mark and Notify Email Template · Microsoft Defender for Office 365
• Microsoft Defender for Office 365: Introducing a new URL click alert in Teams via Microsoft Defender for Office 365 · Microsoft Defender for Office 365
• Microsoft Teams: Report a Suspicious Call in Microsoft Teams · Microsoft Defender for Office 365

View at Microsoft → Copy summary