Archived roadmap update

Microsoft Defender for Office 365
Auto-Remediation of Malicious Entity Clusters Identified in Automated Investigation and Response (AIR)

Saved release information from our Microsoft 365 roadmap archive.

All Microsoft 365 updates

Archived update

This feature is not in the site's RSS build snapshot. The content, release status and dates below are from our saved archive and may be out of date. Check Microsoft for current availability.

Product
Microsoft Defender for Office 365
Saved release status
Launched
Original publication

Feature overview

The feature will expand upon the automated investigation and response (AIR) by enabling AIR to automatically remediate malicious entity clusters. AIR currently recommends actions for SecOps to approve or decline and this enhancement will allow customers to enable auto-remediation to allow AIR to act on recommendations and soft delete messages included in a malicious URL or malicious file cluster.

Archived release information

May CY2025
Preview date: May CY2025

Source: Saved Microsoft roadmap archive Feature ID: 186576

RSS snapshot built . Refreshed on rebuild and deployment.

View on Microsoft