Microsoft Defender Experts for XDR

This diagram describes how Microsoft conducts its four-step Defender Experts for XDR process. It starts with triage and prioritizing Microsoft Defender incidents and alerts to alleviate alert fatigue. Microsoft then investigates and analyzes the most critical incidents first, documenting the process and findings. In the response step, Microsoft helps contain and mitigate incidents fast by delivering managed response and proactive remediation, with Defender Experts available on demand via live chat. Detailed recommendations and best practices are then provided to prevent future cyberattacks. This process delivers continuous security posture improvements around the clock.