Which Defender portal surface for which response task

This sheet compares Action center, Case management, Threat analytics, Incident graph, Blast radius.

CriterionAction centerCase managementThreat analyticsIncident graphBlast radius
PurposeReview and approve pending AIR remediationTrack a hunt and link many incidentsGet ahead of emerging threatsVisualise entity relationships in one incidentTrace attacker paths to a critical asset

The verdict, the full comparison, 5 rules and 2 traps are part of SC-200 access. Unlock SC-200.