All clients
Compare any report across every client you look after.
Defender groups related alerts into an incident, so one attack shows once. Work through these from the most severe: assign each to someone, and close it in Defender with what it turned out to be.
| Client | Incident | Severity | Status | Assigned to | Alerts | Created (UTC) | Link |
|---|---|---|---|---|---|---|---|
| Contoso Legal LLP high | Phishing involving one user | High | Active | 1 | 14 Oct 2026, 14:48 | Open in Defender | |
| Contoso Legal LLP medium | Execution incident on one endpoint | Medium | In progress | helpdesk@msp.example | 1 | 12 Oct 2026, 14:48 | Open in Defender |
| Fabrikam Dental Group high | Phishing involving one user | High | Active | 1 | 14 Oct 2026, 14:48 | Open in Defender | |
| Fabrikam Dental Group medium | Execution incident on one endpoint | Medium | In progress | helpdesk@msp.example | 1 | 12 Oct 2026, 14:48 | Open in Defender |
| Northwind Traders high | Phishing involving one user | High | Active | 1 | 14 Oct 2026, 14:48 | Open in Defender | |
| Northwind Traders medium | Execution incident on one endpoint | Medium | In progress | helpdesk@msp.example | 1 | 12 Oct 2026, 14:48 | Open in Defender |
Built from each client's latest collection with the same report as the client's own page. Select a client's name to open its report.