Skip to content

Commit 50c342c

Browse files
authored
Update m365d-autoir-actions.md
add additional playbooks supported by undo in AC
1 parent 4eeb8ac commit 50c342c

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

defender-xdr/m365d-autoir-actions.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@ If you've determined that a device or a file is not a threat, you can undo remed
6767

6868
| Action source | Supported Actions |
6969
|:---|:---|
70-
| - Automated investigation <br/>- Microsoft Defender Antivirus <br/>- Manual response actions | - Isolate device <br/>- Restrict code execution <br/>- Quarantine a file <br/>- Remove a registry key <br/>- Stop a service <br/>- Disable a driver <br/>- Remove a scheduled task |
70+
| - Automated investigation <br/>- Microsoft Defender Antivirus <br/>- Manual response actions | - Isolate device <br/>- Contain Device <br/>- Contain User <br/>- Restrict code execution <br/>- Quarantine a file <br/>- Remove a registry key <br/>- Stop a service <br/>- Disable a driver <br/>- Remove a scheduled task |
7171

7272
### Undo one remediation action
7373

0 commit comments

Comments
 (0)