Hello! I have been using the Microsoft Defender Endpoint plugin for the Security Incident Response application, I am using it to create IoC in the MDE.
My question was if there is a way to change the status of the alerts that the MDE generates automatically. Is there any way to change the alerts every time I update the ticket status?
On the other hand, I also want to block senders, this is from Microsoft Exchange, is there any plugin to do it? The Microsoft Exchange plugin only deletes or recovers mails. I only need to block senders in exchange (currently I do it through MDO).
Thanks in advance!
