Microsoft Defender Gains Automatic Isolation Feature for Compromised Devices
… Once suspicious behavior or a confirmed compromise is detected, the affected device can be quarantined from most network communications to prevent attackers from moving laterally through the organization’s infrastructure. …