Microsoft Defender for Endpoint now includes a preview feature that can automatically isolate compromised devices during an active attack. The feature is part of automatic attack disruption, which means Microsoft Defender XDR correlates signals from endpoints…
Device isolation basics Automatic device isolation is intended for situations where Defender for Endpoint suspects a workstation is compromised. “Compromised” means an attacker may already control t…