Microsoft Defender for Endpoint device isolation: automatic attack disruption

Microsoft Defender for Endpoint now includes a preview feature that can automatically isolate compromised devices during an active attack. The feature is part of automatic attack disruption, which means Microsoft Defender XDR correlates signals from endpoints, identities, email, cloud apps, and other sources before applying containment actions....

Read the full article at the source.