#Office 365 tasks trial#

Email reported by user as malware or phish, and Multiple users reported email as malware or phish.Suspicious email sending patterns detected.A potentially malicious URL click was detected.

Your triage plan for monitoring the Incidents queue should use the following order of precedence for incidents:

Automated investigation and response (AIR).įor more information about the Incidents queue, see Prioritize incidents in Microsoft 365 Defender.

The Incidents page in the Microsoft 365 Defender portal at (also known as the Incidents queue) allows you to manage and monitor events from the following sources in Defender for Office 365: Daily activities Monitor the Microsoft 365 Defender Incidents queue The Microsoft 365 Defender Security Operations Guide contains additional information that you can use for planning and development.įor a video about this information, see. The activities are grouped into prescriptive daily, weekly, monthly, and ad-hoc tasks.Ī companion article to this guide provides an overview to manage incidents and alerts from Defender for Office 365 on the Incidents page in the Microsoft 365 Defender portal. The rest of this guide describes the required activities for SecOps personnel. These tasks help ensure that your security operations center (SOC) provides a high-quality, reliable approach to protect, detect, and respond to email and collaboration-related security threats. This article gives an overview of the requirements and tasks for successfully operating Microsoft Defender for Office 365 in your organization.

#Office 365 tasks trial#

Learn about who can sign up and trial terms here. Did you know you can try the features in Microsoft 365 Defender for Office 365 Plan 2 for free? Use the 90-day Defender for Office 365 trial at the Microsoft 365 Defender portal trials hub.