The evolution of Microsoft Threat Protection—July update

The new Microsoft Threat Protection advanced threat hunting capability allows easy access to telemetry data, an enhanced portal experience, and detailed query templates. It enables hunting for red teams leveraging a compromised account to store a payload on a local SharePoint site and for sending emails to individuals within the organization. Additionally, it correlates identity events from Microsoft Cloud App Security, Azure Advanced Threat Protection, and Azure Active Directory Identity Protection into a single investigation experience for security analysts and hunters