Whats New
UpdatedUpdated Microsoft Defender documentation in defender-xdr/whats-new.md.
Day in brief
Microsoft Defender for Identity XDR security alerts leads 17 Defender updates
5 February 2026 recorded 17 updated Microsoft Defender documentation changes. The most active areas were Defender XDR, Endpoint, Identity.
- Microsoft Defender for Identity XDR security alerts
Identity · Identity protectionUpdated Microsoft Defender documentation in defender-for-identity/alerts-xdr.md.
- Fixed Reported Inaccuracies
Vulnerability Management · GeneralUpdated Microsoft Defender documentation in defender-vulnerability-management/fixed-reported-inaccuracies.md.
- Understand the advanced hunting schema
Defender XDR · Hunting and detectionUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-schema-tables.md.
- Detect suspicious user activity with UEBA
Cloud Apps · Cloud and workloadsUpdated Microsoft Defender documentation in defender-for-cloud-apps/tutorial-suspicious-activity.md.
- This script acquires the App Context Token and stores it in the variable $token for later use.
Endpoint · Endpoint protectionUpdated Microsoft Defender documentation in defender-endpoint/api/device-health-export-antivirus-health-report-api.md.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
17 updates
Microsoft Defender XDR
7 updatesEntraIdSpnSignInEvents
UpdatedUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-entraidspnsigninevents-table.md.
EntraIdSignInEvents
UpdatedUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-entraidsigninevents-table.md.
GraphApiAuditEvents
UpdatedUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-graphapiauditevents-table.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-schema-tables.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-schema-tables.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-schema-tables.md.
Microsoft Defender for Endpoint
3 updatesThis script acquires the App Context Token and stores it in the variable $token for later use.
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/api/device-health-export-antivirus-health-report-api.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-linux.md.
Run Analyzer Macos
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/run-analyzer-macos.md.
Microsoft Defender for Identity
3 updatesUpdated Microsoft Defender documentation in defender-for-identity/alerts-xdr.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Accounts
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/security-posture-assessments/accounts.md.
Microsoft Defender for Cloud Apps
3 updatesUpdated Microsoft Defender documentation in defender-for-cloud-apps/tutorial-suspicious-activity.md.
Tutorial Suspicious Activity
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/tutorial-suspicious-activity.md.
Tutorial Suspicious Activity
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/tutorial-suspicious-activity.md.
Fixed Reported Inaccuracies
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/fixed-reported-inaccuracies.md.