Should we automatically isolate servers and high-value devices after high-confidence detections?
We don't have a 24/7 SOC, so we're considering automatic isolation in Microsoft Defender for Endpoint for servers and selected high-value devices when specific, high-confidence custom detections fire—for…