Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-query-results.md.
Day in brief
Advanced Hunting Query Results leads 12 Defender updates
6 March 2026 recorded 11 updated Microsoft Defender documentation changes and 1 relevant Message Center announcement. The most active areas were Endpoint, Defender XDR, Unified SecOps.
- Advanced Hunting Query Results
Defender XDR · Hunting and detectionUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-query-results.md.
- Implement attack surface reduction rules
Endpoint · Vulnerabilities and exposureUpdated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-deployment-implement.md.
- How Microsoft names threat actors
Unified SecOps · GeneralUpdated Microsoft Defender documentation in unified-secops-platform/microsoft-threat-actor-naming.md.
- Air About
Office 365 · Email and collaborationUpdated Microsoft Defender documentation in defender-office-365/air-about.md.
- Advanced Hunting: new actions to block attachments and top-level URL domainsDefender XDR · Hunting and detection
Microsoft Defender for Office 365 introduces two new Advanced Hunting remediation actions—blocking attachments and top-level URL domains—to speed SecOps response. Available early March 2026 for Plan 2 and Microsoft 365 E5 users, these features enable direct mitigation from hunting results with no user workflow impact.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
12 updates
Microsoft Defender XDR
2 updatesMicrosoft Defender for Office 365 introduces two new Advanced Hunting remediation actions—blocking attachments and top-level URL domains—to speed SecOps response. Available early March 2026 for Plan 2 and Microsoft 365 E5 users, these features enable direct mitigation from hunting results with no user workflow impact.
Microsoft Defender for Endpoint
8 updates
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-commercial.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-deployment-implement.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-overview.md.
Air About
UpdatedUpdated Microsoft Defender documentation in defender-office-365/air-about.md.
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-threat-actor-naming.md.