Added Microsoft Defender documentation in defender-xdr/okta-attack-disruption.md.
Day in brief
Identity Security leads 53 Defender updates
29 January 2026 recorded 8 new, 42 updated, 2 removed Microsoft Defender documentation changes and 1 relevant Message Center announcement. The most active areas were Endpoint, Defender XDR, Identity.
- Identity Security
Defender XDR · Identity protectionAdded Microsoft Defender documentation in defender-xdr/identity-security.md.
- Playbook Managed Security
Unified SecOps · GeneralUpdated Microsoft Defender documentation in unified-secops-platform/playbook-managed-security.md.
- Create Custom Data Collection Rules
Endpoint · Endpoint protectionUpdated Microsoft Defender documentation in defender-endpoint/create-custom-data-collection-rules.md.
- Enable Instant Visibility Protection And Governance Actions For Your Apps
Cloud Apps · Cloud and workloadsUpdated Microsoft Defender documentation in defender-for-cloud-apps/enable-instant-visibility-protection-and-governance-actions-for-your-apps.md.
- Deploy Defender Identity
Identity · Architecture and deploymentUpdated Microsoft Defender documentation in defender-for-identity/deploy/deploy-defender-identity.md.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
53 updates
Microsoft Defender XDR
11 updatesOkta Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/okta-attack-disruption.md.
Faq Managed Response
UpdatedUpdated Microsoft Defender documentation in defender-xdr/faq-managed-response.md.
Okta Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/okta-attack-disruption.md.
Okta Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/okta-attack-disruption.md.
Faq Managed Response
UpdatedUpdated Microsoft Defender documentation in defender-xdr/faq-managed-response.md.
Okta Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/okta-attack-disruption.md.
Updated Microsoft Defender documentation in defender-xdr/faq-managed-response.md.
Microsoft Teams will introduce a "Report a Call" feature by mid-March 2026, allowing users to flag suspicious one-to-one calls. Reports share limited call metadata with organizations and Microsoft, viewable in Microsoft Defender portal or Teams Admin Center. The feature is enabled by default but can be disabled by admins.
Updated Microsoft Defender documentation in defender-xdr/custom-detection-rules.md.
Added Microsoft Defender documentation in defender-xdr/identity-security.md.
Microsoft Defender for Endpoint
31 updatesUpdated Microsoft Defender documentation in defender-endpoint/create-custom-data-collection-rules.md.
Custom Data Collection
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/custom-data-collection.md.
Added Microsoft Defender documentation in defender-endpoint/DEVICE-CONTENT-CURATION-SUMMARY.md.
Added Microsoft Defender documentation in defender-endpoint/devices-overview.md.
Added Microsoft Defender documentation in defender-endpoint/manage-device-scope-relevance.md.
Added Microsoft Defender documentation in defender-endpoint/targeting-devices.md.
Added Microsoft Defender documentation in defender-endpoint/android-whatsnew.md.
Added Microsoft Defender documentation in defender-endpoint/guidelines-device-inventory.md.
Device inventory
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/machines-view-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/schedule-anti-virus-scans-linux.md.
Mac Whatsnew
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mac-whatsnew.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-versions.md.
Updated Microsoft Defender documentation in defender-endpoint/schedule-anti-virus-scans-linux.md.
Ti Indicator
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/api/ti-indicator.md.
Android New Ux
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/android-new-ux.md.
Devices Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/devices-overview.md.
Mac Health Status
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mac-health-status.md.
Machines View Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/machines-view-overview.md.
Mde Sec Ops Guide
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-sec-ops-guide.md.
Updated Microsoft Defender documentation in defender-endpoint/schedule-anti-virus-scans-linux.md.
Android Configure
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/android-configure.md.
Updated Microsoft Defender documentation in defender-endpoint/DEVICE-CONTENT-CURATION-SUMMARY.md.
Linux Preferences
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/linux-preferences.md.
Mac Install With Other Mdm
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mac-install-with-other-mdm.md.
Mac Schedule Scan
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mac-schedule-scan.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-mac.md.
Android Whatsnew
RemovedRemoved Microsoft Defender documentation in defender-endpoint/android-whatsnew.md.
Assess Devices
RemovedRemoved Microsoft Defender documentation in defender-endpoint/assess-devices.md.
Mac Troubleshoot Mode
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mac-troubleshoot-mode.md.
Mac Troubleshoot Netext Mde
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mac-troubleshoot-netext-mde.md.
Mac Resources
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mac-resources.md.
Quarantine End User
UpdatedUpdated Microsoft Defender documentation in defender-office-365/quarantine-end-user.md.
Microsoft Defender for Identity
5 updatesUpdated Microsoft Defender documentation in defender-for-identity/deploy/prerequisites-sensor-version-3.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/prerequisites-sensor-version-3.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/prerequisites-sensor-version-3.md.
Deploy Defender Identity
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/deploy/deploy-defender-identity.md.
Deploy Defender Identity
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/deploy/deploy-defender-identity.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/enable-instant-visibility-protection-and-governance-actions-for-your-apps.md.
Microsoft Unified SecOps Platform
4 updatesPlaybook Managed Security
UpdatedUpdated Microsoft Defender documentation in unified-secops-platform/playbook-managed-security.md.
Updated Microsoft Defender documentation in unified-secops-platform/criteria.md.
Criteria
UpdatedUpdated Microsoft Defender documentation in unified-secops-platform/criteria.md.
Criteria
UpdatedUpdated Microsoft Defender documentation in unified-secops-platform/criteria.md.