What this tells you
Whether Defender incident management is provisioned and responding for this tenant.
What this can’t tell you
Does not indicate whether incidents are being investigated or resolved effectively.
How we describe it
Shows whether Microsoft Defender incident management is active for your organisation.