Investigate, respond, and remediate threats to Microsoft Teams, SharePoint, and OneDrive
Investigate, respond, and remediate threats to email by using Microsoft Defender for Office 365
Investigate and respond to alerts generated from insider risk policies
Investigate and respond to alerts generated from Data Loss Prevention policies
Identify, investigate, and remediate security risks by using Microsoft Defender for Cloud Apps
Configure Microsoft Defender for Cloud Apps to generate alerts and reports to detect threats
Manage data retention, alert notification, and advanced features
Recommend security baselines for devices
Respond to incidents and alerts
Manage automated investigations and remediations
Assess and recommend endpoint configurations to reduce and remediate vulnerabilities by using the Microsoft’s threat and vulnerability management solution
Manage endpoint threat indicators
Identify and remediate security risks related to Azure AD Identity Protection events
Identify and remediate security risks related to conditional access events
Identify and remediate security risks related to Azure Active Directory events
Identify and remediate security risks related to Active Directory Domain Services using Microsoft Defender for Identity