Hi @João Ricardo Araujo ,
For your questions, you could find the answers from the document about the Emergency Mitigation service:
Exchange Blog: https://techcommunity.microsoft.com/t5/exchange-team-blog/new-security-feature-in-september-2021-cumulative-update-for/ba-p/2783155
Official doc: https://learn.microsoft.com/en-us/exchange/exchange-emergency-mitigation-service?view=exchserver-2019
is there any way to monitor when some action is taken?
Which ones and what can be changed by Microsoft?
Actually these features are all controlled by yourself, you have the rights to choose which function plan could be played.
If you don't want to share the data with MS( which will help Microsoft to improve the defender strength ), simply choose the option:
Best regards,
Lou
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.