Empowering SecOps with the ability to submit, block, kick off investigations and delete emails in bulk with a single action wizard within Explorer. - Rolling out now!
Last year December we published a blog post, where we announced a new Take action feature in the Email Entity and Email Summary panel that lets you take multiple actions at once from a single wizard. This feature makes it easier and faster for SecOps to deal with email threats by giving you logical grouping of actions, contextual availability of actions, and support for tenant level block URLs and files. Overall, we received very positive and encouraging responses on the value it adds for our customers and the ease of use of this flow.
We are very excited to announce that we are now expanding this feature to Threat explorer, where you can apply the same strong and convenient actions to more than one email message at once. Also, Tenant level URL/ file / sender and domain blocks available directly from Threat explorer.
This feature improves Threat explorer’s effectiveness and makes it a more powerful tool for security admins to detect, identify, and remediate threats quickly!
The new Take action feature offers several benefits for security analysts, such as:
To use the new Take action feature, follow these steps:
You can select up to 100 emails at a time.
Click on the “Take Action” button. Note that this button has replaced the previous “Message actions” drop-down menu.
If the email selection from the previous page has more than 100 entries, you can only activate one action at a time and no additional contextual actions.
By default, some actions are unavailable/grayed out based on the latest delivery location of the message. To show all available response actions, slide the toggle on.
We are gradually introducing this feature over the next few weeks. It is designed to help you strengthen your security and reduce your workload. We value your feedback and suggestions on how to make the action experience in Microsoft 365 Defender better. Please engage with Defender for Office 365 forum.
To learn more about Threat explorer and the new Take action feature, visit the following links:
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.