Automated Response Requirements

The following link provides the licensing and additional requirements necessary for Defender XDR to conduct automated response actions.

Configure automated investigation and response capabilities in Microsoft Defender XDR - Microsoft Defender XDRMicrosoftLearn