Summary and resources

Completed

You learned how Microsoft Defender for Endpoint provides information about forensic artifacts found in the environment. How there are specific observable pages for Files, User Accounts, IP Addresses, and Domains.

You should now be able to:

  • Investigate files in Microsoft Defender for Endpoint
  • Investigate domains and IP addresses in Microsoft Defender for Endpoint
  • Investigate user accounts in Microsoft Defender for Endpoint

Learn more

You can learn more by reviewing the following.

Become a Microsoft Defender for Endpoint Ninja

Microsoft Tech Community Security Webinars