Action center: pending and completed remediation actions; automatic attack disruption of compromised users and devices

The Action center in the Defender portal (Investigation and response, Actions and submissions, Action center) is one place to see remediation actions across Defender XDR, whether an analyst took them manually or automated investigation and response (AIR) proposed them. It has two tabs. Pending lists actions that are waiting for approval. History lists actions that were completed, failed, rejected or undone, with who approved them and when. It is the single answer to the question of what has been done, or is waiting to be done, to contain this attack.