Security Analyst Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-analyst-agent.md.
Day in brief
Microsoft Defender for Identity XDR security alerts leads 39 Defender updates
26 May 2026 recorded 37 updated, 1 removed Microsoft Defender documentation changes and 1 relevant Message Center announcement. The most active areas were Identity, Endpoint, Sentinel.
- Microsoft Defender for Identity XDR security alerts
Identity · Identity protectionUpdated Microsoft Defender documentation in defender-for-identity/alerts-xdr.md.
- Security Analyst Agent
Defender XDR · GeneralUpdated Microsoft Defender documentation in defender-xdr/security-analyst-agent.md.
- Workspaces Defender Portal
Sentinel · Cloud and workloadsUpdated Microsoft Defender documentation in sentinel/workspaces-defender-portal.md.
- Email Authentication Troubleshoot
Office 365 · TroubleshootingUpdated Microsoft Defender documentation in defender-office-365/email-authentication-troubleshoot.md.
- Defender Deployment Tool Windows
Endpoint · Endpoint protectionUpdated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
39 updates
Microsoft Defender XDR
5 updatesUpdated Microsoft Defender documentation in defender-xdr/threat-analytics.md.
Updated Microsoft Defender documentation in defender-xdr/threat-analytics-analyst-reports.md.
Investigate Alerts
UpdatedUpdated Microsoft Defender documentation in defender-xdr/investigate-alerts.md.
Zero-hour Auto Purge (ZAP) in Microsoft Defender for Office 365 will now scan and remediate malicious emails in users' Deleted Items folders, enhancing post-delivery protection without new policies. Rollout starts June 2026, affecting all tenants with ZAP enabled, with no user experience changes or required actions.
Microsoft Defender for Endpoint
11 updatesUpdated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.
Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.
Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.
Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.
Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.
Updated Microsoft Defender documentation in defender-endpoint/linux-install-with-defender-deployment-tool.md.
Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.
Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.
Updated Microsoft Defender documentation in defender-endpoint/linux-install-with-defender-deployment-tool.md.
Updated Microsoft Defender documentation in defender-endpoint/linux-install-with-defender-deployment-tool.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Microsoft Defender for Office 365
3 updatesUpdated Microsoft Defender documentation in defender-office-365/defender-for-office-365-whats-new.md.
Updated Microsoft Defender documentation in defender-office-365/attack-simulation-training-get-started.md.
Updated Microsoft Defender documentation in defender-office-365/email-authentication-troubleshoot.md.
Microsoft Defender for Identity
12 updatesUpdated Microsoft Defender documentation in defender-for-identity/alerts-xdr.md.
Alerts Xdr
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/alerts-xdr.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/create-directory-service-account-gmsa.md.
Directory Service Accounts
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/deploy/directory-service-accounts.md.
Manage Action Accounts
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/deploy/manage-action-accounts.md.
Updated Microsoft Defender documentation in defender-for-identity/health-alerts.md.
Remediation Actions
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/remediation-actions.md.
Updated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/deploy-sensor-v3.md.
Deploy Defender Identity
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/deploy/deploy-defender-identity.md.
Deploy Sensor V3
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/deploy/deploy-sensor-v3.md.
Microsoft Sentinel
8 updatesWorkspaces Defender Portal
UpdatedUpdated Microsoft Defender documentation in sentinel/workspaces-defender-portal.md.
Workspaces Defender Portal
UpdatedUpdated Microsoft Defender documentation in sentinel/workspaces-defender-portal.md.
Workspaces Defender Portal
UpdatedUpdated Microsoft Defender documentation in sentinel/workspaces-defender-portal.md.
Workspaces Defender Portal
UpdatedUpdated Microsoft Defender documentation in sentinel/workspaces-defender-portal.md.
Workspaces Defender Portal
UpdatedUpdated Microsoft Defender documentation in sentinel/workspaces-defender-portal.md.
Workspaces Defender Portal
UpdatedUpdated Microsoft Defender documentation in sentinel/workspaces-defender-portal.md.
Removed Microsoft Defender documentation in sentinel/entity-behaviors-layer-application-card.md.
Updated Microsoft Defender documentation in sentinel/datalake/identity-attack-graph.md.