You need to respond quickly to detected security attacks to contain and remediate its damage. As new widespread cyberattacks happen, such as Solarigate and the Exchange Server vulnerability, Microsoft will respond with detailed incident response guidance.
https://docs.microsoft.com/en-us/security/compass/incident-response-playbooks