Easy Rapid Triage
Being able to triage and act on a risky event/incident quickly is crucial for service providers in the course of protecting their clients. If any part of this process is not easy and quick to thoroughly check and resolve, then incidents will go unchecked in the busy schedules of IT admins
Some key attributes of Rapid Triage and Remediation for Service Providers
Alerts on Incidents (groups of contextually related events), not on individual events
Understandable for someone unskilled in Office 365
Has quickly available contextual information on which to complete an investigation quickly
Ability to rapidly fix
Ability to rapidly update the safe parameters of the client tenant to dismiss future similar events