Microsoft Defender for Business
Endpoint protectionRespond to and Mitigate Threats in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn
In brief
The page title was capitalized consistently, “Microsoft Defender portal” was shortened to “Defender portal,” and “flyout” was clarified as “flyout pane.”
What Defender admins need to know
No administrator action is required; the documented response steps remain the same.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Respond to and mitigate threatsMitigate Threats in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn
The Microsoft Defender portal enables your security team to respond to and mitigate detected threats. This article walks you through an example of how you can use Defender for Business to review threat indicators on the Home page, investigate at-risk devices in the device inventory, and take response actions such as running an antivirus scan or initiating an automated investigation.
View detected threats
Use the following steps to view detected threats in the Microsoft Defender portal and take response actions.
Go to the Microsoft Defender portal and sign in.
Notice the cards on the Home page. These cards show how many threats were found, how many user accounts were affected, and which devices or other assets are at risk. The following image is an example:
Select an item, such as a device. A flyout pane opens with more details about alerts and incidents for the selected device, as shown in the following image:
On the
flyout,flyout pane, review the details. Select the ellipsis (...) to open a menu of available actions, as shown in the following image:
Select an available action. For example, you might choose Run antivirus scan, which starts a quick scan with Microsoft Defender Antivirus on the device. Or, you could select Initiate Automated Investigation to trigger an automated investigation on the device. \ No newline at end of file
@@ -1,6 +1,6 @@ --- layout: Conceptual-title: Respond to and mitigate threats in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn+title: Respond to and Mitigate Threats in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn canonicalUrl: https://learn.microsoft.com/en-us/defender-business/mdb-respond-mitigate-threats breadcrumb_path: /defender-business/breadcrumb/toc.json feedback_system: Standard@@ -47,13 +47,13 @@ spProducts: platformId: 889ce437-a165-cbce-2df0-3f0096fb9266 --- -# Respond to and mitigate threats in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn+# Respond to and Mitigate Threats in Microsoft Defender for Business - Microsoft Defender for Business | Microsoft Learn The Microsoft Defender portal enables your security team to respond to and mitigate detected threats. This article walks you through an example of how you can use Defender for Business to review threat indicators on the Home page, investigate at-risk devices in the device inventory, and take response actions such as running an antivirus scan or initiating an automated investigation.
## View detected threats
-Use the following steps to view detected threats in the Microsoft Defender portal and take response actions.
+Use the following steps to view detected threats in the Defender portal and take response actions.
1. Go to the [Microsoft Defender portal](https://security.microsoft.com) and sign in.
2. Notice the cards on the Home page. These cards show how many threats were found, how many user accounts were affected, and which devices or other assets are at risk. The following image is an example:
@@ -67,7 +67,7 @@ Use the following steps to view detected threats in the Microsoft Defender porta 4. Select an item, such as a device. A flyout pane opens with more details about alerts and incidents for the selected device, as shown in the following image:
-5. On the flyout, review the details. Select the ellipsis (...) to open a menu of available actions, as shown in the following image:
+5. On the flyout pane, review the details. Select the ellipsis (...) to open a menu of available actions, as shown in the following image:
6. Select an available action. For example, you might choose **Run antivirus scan**, which starts a quick scan with Microsoft Defender Antivirus on the device. Or, you could select **Initiate Automated Investigation** to trigger an automated investigation on the device.\ No newline at end of file