Important protection alerts responsible for AIR activities are enabled.

Why This Matters

Automated investigation and response (AIR) activities rely on important protection alerts being enabled to detect and remediate threats automatically. Without these alerts, security incidents may be missed, leaving your environment vulnerable to attacks that could have been contained automatically. IT administrators should prioritize enabling these alerts to maintain robust, proactive threat defense.

What Aether365 Checks

Aether365 verifies that all critical protection alerts responsible for triggering automated investigation and response (AIR) are enabled within your Microsoft 365 environment. This check appears in the Aether365 dashboard under the microsoft-365 section.