Issues with "Pending Actions" in Microsoft Defender XDR Despite Full Remediation Setting
Zeynep-2956
0
Reputation points
When an email is soft deleted (both manually and under automation), this action awaits approval in the action center. This doesn't happen for every soft delete. Some occur without needing approval. Upon checking the configurations, I see that full remediation is selected for all endpoints. Therefore, the emails should have been deleted automatically as a result of the automated investigation without awaiting approval. What is the reason for this, and how can I resolve it?
Sign in to answer