Microsoft Defender for Endpoint
Endpoint protectionWhats New In Microsoft Defender Endpoint
In brief
The Defender Endpoint What's New entry now links to the preview-specific Microsoft Store applications section.
What Defender admins need to know
Administrators following the entry will be directed to the relevant preview documentation.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
| Feature | Antivirus audit mode for Linux | Preview | Provides real-time malware detection and alerting without automatically quarantining files or terminating processes. This enables organizations to evaluate Defender detection efficacy and performance on sensitive workloads before enabling enforcement.Available in Microsoft Defender for Endpoint on Linux version 101.26062.0007 or later. |
| Feature | Offboarding API support for Linux | GA | Enables organizations to automate the offboarding of Linux servers from Microsoft Defender for Endpoint through the Offboard machine API, simplifying device lifecycle management at scale.Available in Microsoft Defender for Endpoint on Linux version 101.26062.0007 or later. |
| Release - macOS | Build 101.26062.0012 | GA | Release version 20.126062.12.0 released: See enhancements and features for this release. |
| Feature | Vulnerability assessment for Microsoft Store applicationsVulnerability assessment for Microsoft Store applications | Preview | You can now monitor vulnerabilities on devices running Microsoft Store applications, including Microsoft Teams, Mozilla Firefox, WhatsApp, Slack, Dropbox, DuckDuckGo, Dell Command,Command | Update, HP Smart, HP Support Assistant, Dell SupportAssist for Home PCs, and NVIDIA Control PanelPanel, 1Password, Beyond Compare, and Evernote (see Microsoft Store applicationsMicrosoft Store applications for the full list). Use the Software evidence area in the software page to view the file path for the vulnerable application, along with a suggested query showing the vulnerable app, version, and file location. |
| Release - macOS | Build 101.26062.0011 | GA | Release version 20.126062.11.0 released: See enhancements and features for this release. |
July 2026
@@ -73,7 +73,7 @@ Learn more about [Preview features](/en-us/defender-xdr/preview). | Feature | [Antivirus audit mode for Linux](linux-preferences#antivirus-antimalware-and-edr-settings-in-defender-for-endpoint-on-linux) | Preview | Provides real-time malware detection and alerting without automatically quarantining files or terminating processes. This enables organizations to evaluate Defender detection efficacy and performance on sensitive workloads before enabling enforcement.**Available in Microsoft Defender for Endpoint on Linux version 101.26062.0007 or later.** |
| Feature | [Offboarding API support for Linux](api/offboard-machine-api) | GA | Enables organizations to automate the offboarding of Linux servers from Microsoft Defender for Endpoint through the Offboard machine API, simplifying device lifecycle management at scale.**Available in Microsoft Defender for Endpoint on Linux version 101.26062.0007 or later.** |
| Release - macOS | Build 101.26062.0012 | GA | Release version 20.126062.12.0 released: See [enhancements and features for this release](microsoft-defender-endpoint-releases#macos--august-2026--101260620012). |
-| Feature | [Vulnerability assessment for Microsoft Store applications](/en-us/defender-vulnerability-management/tvm-software-inventory#microsoft-store-applications) | Preview | You can now monitor vulnerabilities on devices running Microsoft Store applications, including Microsoft Teams, Mozilla Firefox, WhatsApp, Slack, Dropbox, DuckDuckGo, Dell Command, HP Smart, HP Support Assistant, Dell SupportAssist for Home PCs, and NVIDIA Control Panel (see [Microsoft Store applications](/en-us/defender-vulnerability-management/tvm-software-inventory#microsoft-store-applications) for the full list). Use the **Software evidence** area in the software page to view the file path for the vulnerable application, along with a suggested query showing the vulnerable app, version, and file location. |
+| Feature | [Vulnerability assessment for Microsoft Store applications](/en-us/defender-vulnerability-management/tvm-software-inventory#microsoft-store-applications-preview) | Preview | You can now monitor vulnerabilities on devices running Microsoft Store applications, including Microsoft Teams, Mozilla Firefox, WhatsApp, Slack, Dropbox, DuckDuckGo, Dell Command | Update, HP Smart, NVIDIA Control Panel, 1Password, Beyond Compare, and Evernote (see [Microsoft Store applications](/en-us/defender-vulnerability-management/tvm-software-inventory#microsoft-store-applications-preview) for the full list). Use the **Software evidence** area in the software page to view the file path for the vulnerable application, along with a suggested query showing the vulnerable app, version, and file location. |
| Release - macOS | Build 101.26062.0011 | GA | Release version 20.126062.11.0 released: See [enhancements and features for this release](microsoft-defender-endpoint-releases#macos--august-2026--101260620011). |
## July 2026