AIR enables you to run automated investigation processes in response to well-known threats that exist today.
AIR can help your security operations team operate more efficiently and effectively
AIR is included in the Microsoft 365 E5, Microsoft 365 E5 Security, Office 365 E5, and Office 365 Advanced Threat Protection Plan 2. With AIR, when certain alerts that you set are triggered, one or more security playbook plans are initiated and an automated investigation begins. During and after this automated investigation process, administrators and your security operations team can look at the details of the investigation, review and approve actions to follow as a result of the investigation, and view details about the alert that triggered the investigation. Read on to find out how we can help and how you can optimize AIR for your organization...