Automatic Remediation can create and remediate certain incidents without your involvement, when enabled. When the system detects a known threat, it moves matching emails from users' mailboxes into their Junk folders or deletes them entirely. If you choose, it can also send an alert email to the security team.
For all other types of messages, create an incident manually. Refer to Creating an Incident.
Activating Automatic Remediation
Activate automatic remediation where you set other default options – from the Menu, select Settings.
Refer to Automatic Remediation Settings for instructions.
Viewing Automatic Remediation Information
On the Incidents page, incidents created through Automatic Remediation show Automatic Remediation in the Created By column.
On the Incident Details page, view the Threats tab for additional information.
For more information, refer to Reviewing Incidents.