Feed / Defender
mediumDefenderAutomated Investigation and Responsenew featurelink_discovery · Jul 16, 2026

[Docs] Automated investigation and response (AIR)

Microsoft Defender for Office 365 now includes Automated Investigation and Response (AIR) capabilities that automatically investigate and respond to security incidents. This enhancement improves threat detection and response times by automating the investigation process for connectors in Exchange Online.

Linked from "Enhanced filtering for connectors in Exchange Online": Automated investigation and response (AIR)
View original article →
Security
threat_protectioncloud_security
Audience
security_engineeradmin
Environment
cloud
Ontology Topics
AZ-500
Classification confidence: 90%
Loading correlations…
[Docs] Automated investigation and response (AIR) | 365Forge