Summary and resources

Completed

You learned how Microsoft Defender for Endpoint provides the remote capability to contain devices and collect forensics data. The Live Response feature allows for a restricted remote access shell on the device.

You should now be able to:

• Perform actions on a device using Microsoft Defender for Endpoint
• Conduct forensics data collection using Microsoft Defender for Endpoint
• Access devices remotely using Microsoft Defender for Endpoint

Learn more

You can learn more by reviewing the following.

Become a Microsoft Defender for Endpoint Ninja

Microsoft Tech Community Security Webinars