This section describes how to get started using MDR and MTH.

  1. Set up email notifications and subscribe to reports. See Set up Managed Detection and MDR Reporting Notifications and Set up MDR Email Notifications.
  2. Add the MDR Triage column to the Alerts page. See Add the MDR Triage Column to the Alerts Page.
  3. Configure policy settings to enable MDR analysts to respond with threat containment actions during an active incident and to use recommended best practices. See MDR and MTH Recommended Policy Settings.