Incident Triage
Reads alerts from Defender XDR & Sentinel, correlates identity & device context, ranks the queue and drafts the first response packet.
- data
- Defender XDR · Sentinel · Entra ID
- tools
- enrich-ip · isolate-device
- skills
- prioritise · summarise · draft-response