Microsoft Defender for Office 365: Auto-Remediation of Malicious Entity Clusters Identified in Automated Investigation and Response (AIR)

The feature will expand upon the automated investigation and response (AIR) by enabling AIR to automatically remediate malicious entity clusters. AIR currently recommends actions for SecOps to approve or decline and this enhancement will allow customers to enable auto-remediation to allow AIR to act on recommendations and soft delete messages included in a malicious URL or malicious file cluster.