Which of the below artifact types contains an investigation page?

The correct answer is A. Domain. In Microsoft Defender for Endpoint, a Domain artifact has a dedicated investigation page. When you navigate to a domain entity within the portal (e.g., from an alert, timeline event, or threat intelligence), you are presented with an investigation page that aggregates related…

Submitted by the_admin· Apr 18, 2026Manage threat mitigation using Microsoft Defender XDR

Question

Options

ADomain
BThreat Actor
CHunter
DAlert

How the community answered

(23 responses)

A
91% (21)
B
4% (1)
C
4% (1)

Explanation

In Microsoft Defender for Endpoint, a Domain artifact has a dedicated investigation page. When you navigate to a domain entity within the portal (e.g., from an alert, timeline event, or threat intelligence), you are presented with an investigation page that aggregates related alerts, observed devices, URLs, and threat context associated with that domain. This allows analysts to pivot and investigate the scope of domain-related activity across the organization. Among the listed options, 'Threat Actor,' 'Hunter,' and 'Alert' do not have the same dedicated investigation page structure as a Domain artifact in MDE.

Topics

#Microsoft Defender XDR#Investigation#Artifacts#Entity pages

Community Discussion

No community discussion yet for this question.

Full SC-200 Practice