Microsoft Defender for Endpoint
Endpoint protection

Review Alerts

In brief

The alert review page’s introductory text now links to “Investigate alerts in Microsoft Defender for Endpoint.” The page date and custom metadata were also updated.

What Defender admins need to know

Administrators have a more direct path to related alert investigation guidance; no action is required.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

The alert page in Microsoft Defender for Endpoint provides full context to the alert, by combining attack signals and alerts related to the selected alert, to construct a detailed alert story.

Quickly triage, investigate, and take effective action on alerts that affect your organization. Understand why the alerts were triggered, and their impact from one location. Learn more about alerts in this overview.Investigate alerts in Microsoft Defender for Endpoint.

[!VIDEO https://learn-video.azurefd.net/vod/player?id=8a9c08a6-558c-47a8-a336-d748acbdaa80]