Section 3 – Familiarizing Yourself with Alerts, Incidents, Evidence, and Dashboards 

The objective of Section 3 is to ensure you become uniquely familiar with each of the portals, including for alerts, incidents, evidence, and dashboards.

This part of the book comprises the following chapters:

• Chapter 6, An Overview: Microsoft Defender for Endpoint Alerts, Incidents, Evidence, and Dashboards
• Chapter 7, Microsoft Defender for Identity: Alerts and Incidents
• Chapter 8, Microsoft Defender for Office: Threats to Productivity
• Chapter 9, Microsoft Defender for Cloud Apps and Protecting your Cloud Apps