Optimize endpoint operations by using automation, monitoring, and reporting

Official references for this objective

• Microsoft — Advanced Hunting API - Microsoft Defender for Endpoint | Microsoft Learn

  Application AdvancedQuery.Read.All Run advanced queries Delegated (work or school account) AdvancedQuery.Read Run advanced queries

• Microsoft — Configure advanced features in Microsoft Defender for Endpoint - Microsoft Defender for Endpoint | Microsoft Learn

  Turn on the auto-resolve alerts setting to automatically resolve alerts where no threats were found or where detected threats were remediated.

• Microsoft — Configure Microsoft Defender Antivirus using Microsoft Intune - Microsoft Defender for Endpoint | Microsoft Learn

  Clean - Service tries to recover files and tries to disinfect. Quarantine - Moves files to quarantine. Remove - Removes files from system.

• Microsoft — Intune-based deployment for Microsoft Defender for Endpoint on macOS - Microsoft Defender for Endpoint | Microsoft Learn

  including monitoring and reports per device, user, configuration policies and more

• Microsoft — Ring deployment using Intune and Microsoft Update (MU) - Microsoft Defender for Endpoint | Microsoft Learn

  set the "Signature Update Fallback Order" back to the original setting" InternalDefinitionUpdateServer|MicrosoftUpdateServer|MMPC|FileShare