Learn how automated investigation and remediation (AIR) work in Microsoft Defender for Endpoint. You ll learn about concepts including automation levels how automated investigations are triggered how to review investigation findings and how automated remediation actions work.á