POCaaS Session 3: Investigation and Hunting 

For any product related questions/feedback, please address them on the Microsoft Tech Community discussion space forum. For Microsoft Defender XDR products visit techcommunity.microsoft.com/t5/microsoft-defender-xdr/bd-p/MicrosoftThreatProtection

“The amount of richness you get in an incident is a direct correlation of the license you own”` Well said. and also spot on with your description of the E5, "context, correlation, and visibility"

Great to have these detections, but how bad is that not having this prevented 🙁