Summary and resources

Completed

You learned how Microsoft Defender for Endpoint provides the remote capability to contain devices and collect forensics data. The Live Response feature allows for a restricted remote access shell on the device.

You should now be able to:

  • Perform actions on a device using Microsoft Defender for Endpoint
  • Conduct forensics data collection using Microsoft Defender for Endpoint
  • Access devices remotely using Microsoft Defender for Endpoint

Learn more

You can learn more by reviewing the following.

Become a Microsoft Defender for Endpoint Ninja

Microsoft Tech Community Security Webinars