Expel for Microsoft automates security operations across the Microsoft tech stack. It ingests security signals from Microsoft’s products into Expel Workbench. Expel then applies its own detection engine along with threat intelligence gathered from across its broad customer base to quickly find activity that doesn’t look right ‘ like suspicious logins, data exfiltration, suspicious RDP activity or unusual inbox rules. With Expel, you’ll get:24..7 monitoring and response for Microsoft security signals.
Source: https://www.helpnetsecurity.com/2021/06/06/expel-microsoft/