Getting started with cases in Microsoft Defender & Sentinel

Описание: Learn how to use Cases in Microsoft Defender to organise investigations that span multiple incidents.

👉 Getting with Copilot in Microsoft XDR:    • AI for Security: Microsoft's Copilot in XDR  

V I D E O S T O W A T C H N E X T :

Getting started with Purview Data Loss Prevention:    • How to implement data loss prevention (DLP...  

Getting started with Copilot for Security:    • Introducing Copilot for Security: Your New...  

--------------------------------------------

➡️ How to onboard and get started with Copilot for Security:    • Introducing Copilot for Security: Your New...  

--------------------------------------------

In this step-by-step walkthrough I cover:
• What a Case is and why you'd open one
• The Sentinel workspace connection that makes Cases appear
• Role permissions you need to check
• How to create a Case, set custom status values, and add tasks
• Linking related incidents so everything sits in one place
• Using the Activity log for notes and audit history
• Uploading attachments and letting Defender scan them

Microsoft Learn – Manage security operations cases in the Microsoft Defender portal
https://learn.microsoft.com/unified-s...

#microsoft #defender #cybersecurity