Microsoft Defender for Office 365 introduces a new MessageContents table in Advanced Hunting for Teams messages, enabling authorized security analysts to query message snippets and metadata for threat investigations. It rolls out worldwide from late September to mid-October 2026, requiring appropriate permissions for access.
Day in brief
Advanced Hunting adds MessageContents table for Teams message investigations
Microsoft Defender for Office 365 is introducing a new MessageContents table in Advanced Hunting for Microsoft Teams messages. Authorized security analysts will be able to query message snippets and metadata for threat investigations, with worldwide rollout scheduled from late September through mid-October 2026.
- New Teams message hunting data
Defender XDR · Hunting and detectionThe MessageContents table adds queryable snippets and metadata from Microsoft Teams messages to Advanced Hunting for threat investigations. Access requires appropriate permissions, and rollout is planned worldwide from late September to mid-October 2026.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
1 update