We recently changed the Incident and alert classification experience, including an updated classification and determination values list, previously supported values “Apt” and “SecurityPersonnel” will soon be retired.
When this will happen
We will begin rolling out late August and expect to complete by early September.
How this will affect your organization
Once enabled, you will no longer be able to set “Apt” or “SecurityPersonnel” determination values.
What you need to do to prepare
Once this change is enabled, you will be able to use only the new determination values, you should look to adjust your saved automation flows or any other systems depending on these values.
- Review the blog post for additional details: Security, Compliance, and Identity > Microsoft 365 Defender Blog > Reduce time to response with classification
Message ID: MC414797
Published: 16 August 2022
Updated: 16 August 2022
Platform: World tenant, Online