Recorded 23 Oct 2026 at 09:33 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record.
Microsoft 365 roadmapMicrosoft 365 roadmap
Microsoft Defender for Office 365: Auto-Remediation of Malicious Similarity Clusters in AIR
We are expanding the auto-remediation capabilities in Automated Investigations and Response (AIR) to fully automate the remediation of malicious similarity clusters. Earlier this year, we introduced auto-remediation for malicious URL and file clusters. Building on that foundation, this enhancement enables AIR to automatically approve all pending remediation actions it generates—eliminating the need for manual intervention and streamlining the response process for SOC teams. This advancement significantly reduces response time and operational overhead, allowing security teams to focus on higher-priority threats.
What it said
Roadmap ID
502528
Status
Launched
General availability target
December CY2025
Preview target
Not stated
Products
Microsoft Defender for Office 365
Clouds
Worldwide (Standard Multi-Tenant)
Release phases
General Availability
Platforms
Web
Added to the roadmap
3 Sep 2025 23:00 UTC
Last changed
24 Feb 2026 16:30 UTC
Source evidence when recorded
Microsoft 365 roadmap
Complete at observationRead 23 Oct 2026 at 09:33 UTC
Coverage describes the sources at this observation. A complete read then does not establish their current position.
Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.