Incident and alert classification | Microsoft 365 Defender

In Microsoft 365 Defender you can classify each incident (or alert) as a false or true positive in the portal (or as an expected activity like security testing). Aside from helping you focus on true positives classifying incidents has added benefits, and we really want you to get in the habit of doing this.

► Follow us on social:

#microsoft365 #microsoft