Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-deviceevents-table.md.
Day in brief
Microsoft Defender Vulnerability Management integration with Exposure Management leads 55 Defender updates
22 June 2026 recorded 1 new, 53 updated Microsoft Defender documentation changes and 1 relevant Message Center announcement. The most active areas were Defender XDR, Sentinel, Office 365.
- Microsoft Defender Vulnerability Management integration with Exposure Management
Exposure Management · Vulnerabilities and exposureUpdated Microsoft Defender documentation in exposure-management/vulnerability-management-integration.md.
- Siem Migration
Sentinel · Cloud and workloadsUpdated Microsoft Defender documentation in sentinel/siem-migration.md.
- 2026 Microsoft 365 Packaging Update
Defender XDR · Email and collaborationThe 2026 Microsoft 365 Packaging Update, rolling out mid-June to early August, adds enhanced security features like Microsoft Defender Plan 1, URL time-of-click protection, Intune improvements, and +50GB Exchange Online storage. Microsoft 365 Business SKU backfill completes by September 30. Admins should review and configure new policies.
- Security Operations guide for email authentication in Microsoft 365
Office 365 · Email and collaborationUpdated Microsoft Defender documentation in defender-office-365/email-auth-sec-ops-guide.md.
- Device inventory field reference
Endpoint · Endpoint protectionAdded Microsoft Defender documentation in defender-endpoint/device-inventory-field-reference.md.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
55 updates
Microsoft Defender XDR
13 updatesUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicefileevents-table.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-deviceimageloadevents-table.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicelogonevents-table.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicenetworkevents-table.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-deviceregistryevents-table.md.
Updated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption-exclusions.md.
Investigate Alerts
UpdatedUpdated Microsoft Defender documentation in defender-xdr/investigate-alerts.md.
Automatic Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Updated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption-exclusions.md.
Phishing Triage Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/phishing-triage-agent.md.
The 2026 Microsoft 365 Packaging Update, rolling out mid-June to early August, adds enhanced security features like Microsoft Defender Plan 1, URL time-of-click protection, Intune improvements, and +50GB Exchange Online storage. Microsoft 365 Business SKU backfill completes by September 30. Admins should review and configure new policies.
Updated Microsoft Defender documentation in defender-xdr/troubleshoot.md.
Microsoft Defender for Endpoint
9 updatesAdded Microsoft Defender documentation in defender-endpoint/device-inventory-field-reference.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Microsoft Defender for Office 365
10 updatesUpdated Microsoft Defender documentation in defender-office-365/email-auth-sec-ops-guide.md.
Updated Microsoft Defender documentation in defender-office-365/email-authentication-arc-configure.md.
Updated Microsoft Defender documentation in defender-office-365/email-authentication-dkim-configure.md.
Updated Microsoft Defender documentation in defender-office-365/advanced-delivery-policy-configure.md.
Updated Microsoft Defender documentation in defender-office-365/anti-spam-policies-configure.md.
Updated Microsoft Defender documentation in defender-office-365/anti-phishing-policies-eop-configure.md.
Updated Microsoft Defender documentation in defender-office-365/anti-phishing-policies-mdo-configure.md.
Updated Microsoft Defender documentation in defender-office-365/anti-malware-policies-configure.md.
Updated Microsoft Defender documentation in defender-office-365/attack-simulation-training-simulations.md.
Anti Phishing Policies About
UpdatedUpdated Microsoft Defender documentation in defender-office-365/anti-phishing-policies-about.md.
Microsoft Defender for Cloud
2 updatesRegional Availability
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud/regional-availability.md.
Release Notes
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud/release-notes.md.
Microsoft Defender for IoT
2 updatesDevice Discovery
UpdatedUpdated Microsoft Defender documentation in defender-for-iot/device-discovery.md.
Manage Devices Inventory
UpdatedUpdated Microsoft Defender documentation in defender-for-iot/manage-devices-inventory.md.
Microsoft Sentinel
11 updatesSiem Migration
UpdatedUpdated Microsoft Defender documentation in sentinel/siem-migration.md.
Updated Microsoft Defender documentation in sentinel/customize-entity-activities.md.
Updated Microsoft Defender documentation in sentinel/create-nrt-rules.md.
Updated Microsoft Defender documentation in sentinel/create-analytics-rules.md.
Updated Microsoft Defender documentation in sentinel/connect-services-windows-based.md.
Updated Microsoft Defender documentation in sentinel/create-incidents-from-alerts.md.
Updated Microsoft Defender documentation in sentinel/connect-services-diagnostic-setting-based.md.
Updated Microsoft Defender documentation in sentinel/create-analytics-rule-from-template.md.
Updated Microsoft Defender documentation in sentinel/customize-alert-details.md.
Create Incident Manually
UpdatedUpdated Microsoft Defender documentation in sentinel/create-incident-manually.md.
Updated Microsoft Defender documentation in sentinel/connect-services-api-based.md.
Microsoft Defender EASM
5 updatesHost asset filters
UpdatedUpdated Microsoft Defender documentation in easm/host-asset-filters.md.
ASN asset filters
UpdatedUpdated Microsoft Defender documentation in easm/asn-asset-filters.md.
IP address asset filters
UpdatedUpdated Microsoft Defender documentation in easm/ip-address-asset-filters.md.
IP block asset filters
UpdatedUpdated Microsoft Defender documentation in easm/ip-block-asset-filters.md.
Updated Microsoft Defender documentation in easm/ssl-certificate-asset-filters.md.
Updated Microsoft Defender documentation in exposure-management/vulnerability-management-integration.md.
Updated Microsoft Defender documentation in exposure-management/get-started-exposure-management.md.
Updated Microsoft Defender documentation in exposure-management/microsoft-security-exposure-management.md.