Updated Microsoft Defender documentation in defender-xdr/dex-xdr-overview.md.
MSSP guide for Microsoft Defender Experts service leads 184 Defender updates
Week of 23 February 2026 recorded 6 new, 174 updated, 3 removed Microsoft Defender documentation changes and 1 relevant Message Center announcement. The most active areas were Endpoint, Identity, Defender XDR.
- MSSP guide for Microsoft Defender Experts service
Defender XDR · General
Added Microsoft Defender documentation in defender-xdr/defender-experts-managed-security-guide.md.
- Microsoft Defender for Identity XDR security alerts
Identity · Identity protection
Updated Microsoft Defender documentation in defender-for-identity/alerts-xdr.md.
- Tvm Weaknesses
Vulnerability Management · Vulnerabilities and exposure
Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-weaknesses.md.
- Permissions needed for the site security feature of Microsoft Defender for IoT in the Defender portal
IoT · General
Updated Microsoft Defender documentation in defender-for-iot/set-up-rbac.md.
- Device inventory field reference
Endpoint · Endpoint protection
Added Microsoft Defender documentation in defender-endpoint/device-inventory-field-reference.md.
Review the linked Microsoft Learn changes that apply to your managed platforms, policies, applications, and rollout plans. The archive preserves the source diff for verification.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
Updates this week
Microsoft Defender XDR
24 updatesAdded Microsoft Defender documentation in defender-xdr/defender-experts-managed-security-guide.md.
Microsoft Defender for Office 365 URL click alerts will now include Microsoft Teams, enabling detection of malicious link clicks in Teams messages. This feature, rolling out from February to May 2026, enhances alert visibility and investigation in the Defender portal for licensed organizations, with no user workflow changes.
Added Microsoft Defender documentation in defender-xdr/defender-experts-mssp-guide.md.
Automatic Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Defender Experts Mssp Guide
RemovedRemoved Microsoft Defender documentation in defender-xdr/defender-experts-mssp-guide.md.
Updated Microsoft Defender documentation in defender-xdr/dex-xdr-overview.md.
Automatic Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Automatic Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Automatic Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Updated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Shield Predict Threats
UpdatedUpdated Microsoft Defender documentation in defender-xdr/shield-predict-threats.md.
Configure Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/configure-attack-disruption.md.
Shield Predict Threats
UpdatedUpdated Microsoft Defender documentation in defender-xdr/shield-predict-threats.md.
Investigate Users
UpdatedUpdated Microsoft Defender documentation in defender-xdr/investigate-users.md.
Investigate Users
UpdatedUpdated Microsoft Defender documentation in defender-xdr/investigate-users.md.
Automatic Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Updated Microsoft Defender documentation in defender-xdr/third-party-enrichment-defender-experts.md.
Investigate Users
UpdatedUpdated Microsoft Defender documentation in defender-xdr/investigate-users.md.
Investigate Identities
UpdatedUpdated Microsoft Defender documentation in defender-xdr/investigate-users.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-xdr.md.
Dex Xdr Overview
UpdatedUpdated Microsoft Defender documentation in defender-xdr/dex-xdr-overview.md.
Updated Microsoft Defender documentation in defender-xdr/security-copilot-m365d-script-analysis.md.
Updated Microsoft Defender documentation in defender-xdr/custom-detection-rules.md.
Microsoft Defender for Endpoint
103 updatesUpdated Microsoft Defender documentation in defender-endpoint/configure-extension-file-exclusions-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/standard-device-connectivity-urls-commercial.md.
Updated Microsoft Defender documentation in defender-endpoint/standard-device-connectivity-urls-gov.md.
Updated Microsoft Defender documentation in defender-endpoint/api/exposed-apis-create-app-nativeapp.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-commercial.md.
Mde Plugin Wsl
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-plugin-wsl.md.
Raw Data Export Event Hub
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/api/raw-data-export-event-hub.md.
Updated Microsoft Defender documentation in defender-endpoint/api/exposed-apis-create-app-partners.md.
Raw Data Export Event Hub
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/api/raw-data-export-event-hub.md.
Updated Microsoft Defender documentation in defender-endpoint/api/run-advanced-query-sample-python.md.
This script acquires the App Context Token and stores it in the variable $token for later use.
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/api/device-health-export-antivirus-health-report-api.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Added Microsoft Defender documentation in defender-endpoint/device-inventory-field-reference.md.
Updated Microsoft Defender documentation in defender-endpoint/investigate-machines.md.
Added Microsoft Defender documentation in defender-endpoint/linux-offboard-linux-endpoints.md.
Updated Microsoft Defender documentation in defender-endpoint/machine-tags.md.
Updated Microsoft Defender documentation in defender-endpoint/machines-view-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/manage-device-scope-relevance.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Devices Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/devices-overview.md.
Machines View Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/machines-view-overview.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Updated Microsoft Defender documentation in defender-endpoint/device-inventory-field-reference.md.
Machine Tags
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/machine-tags.md.
Device Discovery
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/device-discovery.md.
Machine Tags
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/machine-tags.md.
Device Discovery
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/device-discovery.md.
Assess Devices
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/assess-devices.md.
Updated Microsoft Defender documentation in defender-endpoint/DEVICE-CONTENT-CURATION-SUMMARY.md.
Devices Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/devices-overview.md.
Configure Device Discovery
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/configure-device-discovery.md.
Updated Microsoft Defender documentation in defender-endpoint/linux-install-with-defender-deployment-tool.md.
Updated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-device-discovery.md.
Gov
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/gov.md.
Updated Microsoft Defender documentation in defender-endpoint/internet-facing-devices.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Network Devices
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/network-devices.md.
Updated Microsoft Defender documentation in defender-endpoint/assess-devices.md.
Updated Microsoft Defender documentation in defender-endpoint/device-timeline-event-flag.md.
Updated Microsoft Defender documentation in defender-endpoint/supported-capabilities-by-platform.md.
Updated Microsoft Defender documentation in defender-endpoint/targeting-devices.md.
Whats New Mde Archive
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/whats-new-mde-archive.md.
Custom Data Collection
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/custom-data-collection.md.
Device Discovery
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/device-discovery.md.
Device Discovery
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/device-discovery.md.
Updated Microsoft Defender documentation in defender-endpoint/device-discovery.md.
Updated Microsoft Defender documentation in defender-endpoint/create-custom-data-collection-rules.md.
Device Discovery
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/device-discovery.md.
Device Discovery
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/device-discovery.md.
Device Discovery
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/device-discovery.md.
Device Discovery
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/device-discovery.md.
Devices Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/devices-overview.md.
Linux Install Manually
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/linux-install-manually.md.
Mac Support Perf
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mac-support-perf.md.
Machines View Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/machines-view-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/manage-device-scope-relevance.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-antivirus-updates.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-ios.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-mac.md.
Network Devices
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/network-devices.md.
Updated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-commercial.md.
Updated Microsoft Defender documentation in defender-endpoint/supported-capabilities-by-platform.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-commercial.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-commercial.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-gov.md.
Mac Device Control Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mac-device-control-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/manage-tamper-protection-microsoft-365-defender.md.
Updated Microsoft Defender documentation in defender-endpoint/standard-device-connectivity-urls-commercial.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-commercial.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-commercial.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-commercial.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-gov.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-gov.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-gov.md.
Switch To Mde Phase 2
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/switch-to-mde-phase-2.md.
Switch To Mde Phase 2
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/switch-to-mde-phase-2.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/standard-device-connectivity-urls-commercial.md.
Switch To Mde Phase 2
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/switch-to-mde-phase-2.md.
Updated Microsoft Defender documentation in defender-endpoint/api/exposed-apis-create-app-nativeapp.md.
Machines View Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/machines-view-overview.md.
Device Discovery
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/device-discovery.md.
Device Discovery
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/device-discovery.md.
Updated Microsoft Defender documentation in defender-endpoint/device-inventory-field-reference.md.
Devices Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/devices-overview.md.
Api Hello World
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/api/api-hello-world.md.
Updated Microsoft Defender documentation in defender-endpoint/api/exposed-apis-full-sample-powershell.md.
PowerShell
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/api/exposed-apis-create-app-webapp.md.
Updated Microsoft Defender documentation in defender-endpoint/supported-capabilities-by-platform.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Updated Microsoft Defender documentation in defender-endpoint/linux-installer-script.md.
Troubleshoot device discovery and authenticated network scans in Microsoft Defender for Endpoint
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/troubleshoot-device-discovery-network-scans.md.
Microsoft Defender for Office 365
15 updatesUpdated Microsoft Defender documentation in defender-office-365/submissions-user-reported-messages-custom-mailbox.md.
Updated Microsoft Defender documentation in defender-office-365/mdo-support-teams-quick-configure.md.
Quarantine Policies
UpdatedUpdated Microsoft Defender documentation in defender-office-365/quarantine-policies.md.
Updated Microsoft Defender documentation in defender-office-365/submissions-user-reported-messages-custom-mailbox.md.
Updated Microsoft Defender documentation in defender-office-365/submissions-user-reported-messages-custom-mailbox.md.
Updated Microsoft Defender documentation in defender-office-365/recommended-settings-for-eop-and-office365.md.
Updated Microsoft Defender documentation in defender-office-365/tenant-allow-block-list-email-spoof-configure.md.
Updated Microsoft Defender documentation in defender-office-365/tenant-allow-block-list-email-spoof-configure.md.
Updated Microsoft Defender documentation in defender-office-365/email-authentication-spf-configure.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-admin-manage-messages-files.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-quarantine-notifications.md.
Updated Microsoft Defender documentation in defender-office-365/advanced-delivery-policy-configure.md.
Air About
UpdatedUpdated Microsoft Defender documentation in defender-office-365/air-about.md.
Updated Microsoft Defender documentation in defender-office-365/advanced-delivery-policy-configure.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-quarantine-notifications.md.
Microsoft Defender for Identity
27 updatesRemediation Actions
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/remediation-actions.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Updated Microsoft Defender documentation in defender-for-identity/alerts-xdr.md.
Updated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Updated Microsoft Defender documentation in defender-for-identity/what-is.md.
Alerts Xdr
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/alerts-xdr.md.
Updated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Remediation Actions
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/remediation-actions.md.
Connect Cyber Ark
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/connect-cyber-ark.md.
Connect Cyber Ark
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/connect-cyber-ark.md.
Connect Cyber Ark
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/connect-cyber-ark.md.
Updated Microsoft Defender documentation in defender-for-identity/defender-for-identity-cyber-ark-overview.md.
Remediation Actions
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/remediation-actions.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Added Microsoft Defender documentation in defender-for-identity/connect-cyber-ark.md.
Whats New Archive
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/whats-new-archive.md.
Remediation actions
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/remediation-actions.md.
Added Microsoft Defender documentation in defender-for-identity/defender-for-identity-cyber-ark-overview.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-windows-event-collection.md.
Updated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Updated Microsoft Defender documentation in defender-for-identity/what-is.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-windows-event-collection.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/active-directory-federation-services.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/prerequisites-sensor-version-2.md.
Connect Cyberark
RemovedRemoved Microsoft Defender documentation in defender-for-identity/connect-cyberark.md.
Removed Microsoft Defender documentation in defender-for-identity/defender-for-identity-cyberark-overview.md.
Microsoft Defender for IoT
6 updatesUpdated Microsoft Defender documentation in defender-for-iot/set-up-rbac.md.
Updated Microsoft Defender documentation in defender-for-iot/configure-permissions.md.
Updated Microsoft Defender documentation in defender-for-iot/investigate-threats.md.
Updated Microsoft Defender documentation in defender-for-iot/prerequisites.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-for-iot/whats-new.md.
Updated Microsoft Defender documentation in defender-for-iot/get-started.md.
Tvm Supported Os
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-supported-os.md.
Tvm Hardware And Firmware
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-hardware-and-firmware.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-vulnerable-devices-report.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-vulnerable-devices-report.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-weaknesses-security-advisories.md.
Tvm Supported Os
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-supported-os.md.
Tvm Weaknesses
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-weaknesses.md.
CVE exceptions
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-exception.md.
Tvm Remediation
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-remediation.md.
