O365 PS Response Connector
Overview
The O365 PS Response Connector in Seqrite XDR integrates with Microsoft Office 365 via PowerShell
to enable direct response actions on user accounts and mailboxes. It helps security teams contain
threats within the O365 environment by automating account and mailbox-level remediation.
What It Does
- Provides automated or manual response actions for compromised O365 accounts.
- Helps prevent unauthorized access, email misuse, and data exfiltration.
- Integrates with playbooks to standardize remediation workflows across incidents.
Key Functions
| Function | Purpose |
|---|---|
| User Account Disable | Temporarily disable a compromised Office 365 user account. |
| User Account Enable | Re-enable a user account once the threat is resolved. |
| Password Reset | Force a password reset for a compromised account. |
| Mailbox Restriction | Restrict mailbox access to prevent malicious activity. |
| Mailbox Restore | Restore mailbox access after remediation. |