Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Evaluate Mda Using Mde Security Settings Management leads 194 Defender updates
Week of 9 March 2026 recorded 4 new, 182 updated, 7 removed Microsoft Defender documentation changes and 1 relevant Message Center announcement. The most active areas were Endpoint, Defender XDR, Identity.
- Evaluate Mda Using Mde Security Settings Management
Endpoint · Endpoint protection
Updated Microsoft Defender documentation in defender-endpoint/evaluate-mda-using-mde-security-settings-management.md.
- Security Alert Triage Agent overview in Microsoft Defender
Defender XDR · Incidents and response
Added Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
- Fixed Reported Inaccuracies
Vulnerability Management · General
Updated Microsoft Defender documentation in defender-vulnerability-management/fixed-reported-inaccuracies.md.
- Microsoft Defender Identity Security dashboard
Identity · Identity protection
Updated Microsoft Defender documentation in defender-for-identity/dashboard.md.
- Whats New
Exposure Management · Vulnerabilities and exposure
Updated Microsoft Defender documentation in exposure-management/whats-new.md.
Review the linked Microsoft Learn changes that apply to your managed platforms, policies, applications, and rollout plans. The archive preserves the source diff for verification.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
Updates this week
Microsoft Defender XDR
44 updatesSecurity Alert Triage Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Security Alert Triage Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Security Alert Triage Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Security Alert Triage Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Security Alert Triage Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Security Alert Triage Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Security Alert Triage Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Added Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Security Alert Triage Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent-overview.md.
Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent-usage.md.
Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent-prerequisites.md.
Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent-setup.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Alert Triage Agent
RemovedRemoved Microsoft Defender documentation in defender-xdr/alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent-overview.md.
Alert Policies
UpdatedUpdated Microsoft Defender documentation in defender-xdr/alert-policies.md.
Custom Detection Rules
UpdatedUpdated Microsoft Defender documentation in defender-xdr/custom-detection-rules.md.
Updated Microsoft Defender documentation in defender-xdr/custom-detection-rules.md.
Advanced Hunting Overview
UpdatedUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-overview.md.
Advanced Hunting Take Action
UpdatedUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-take-action.md.
Advanced Hunting Take Action
UpdatedUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-take-action.md.
Advanced Hunting Take Action
UpdatedUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-take-action.md.
Custom Detection Rules
UpdatedUpdated Microsoft Defender documentation in defender-xdr/custom-detection-rules.md.
Updated Microsoft Defender documentation in defender-xdr/custom-detection-rules.md.
Advanced Hunting Take Action
UpdatedUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-take-action.md.
Advanced Hunting Take Action
UpdatedUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-take-action.md.
Manage Rbac
UpdatedUpdated Microsoft Defender documentation in defender-xdr/manage-rbac.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-xdr/whats-new.md.
Automatic Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Identity Security Dashboard
UpdatedUpdated Microsoft Defender documentation in defender-xdr/identity-security/identity-security-dashboard.md.
Added Microsoft Defender documentation in defender-xdr/investigate-non-human-identities.md.
Updated Microsoft Defender documentation in defender-xdr/investigate-non-human-identities.md.
Investigate an identity
UpdatedUpdated Microsoft Defender documentation in defender-xdr/investigate-users.md.
Automatic Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Updated Microsoft Defender documentation in defender-xdr/third-party-enrichment-defender-experts.md.
Compare Rbac Roles
UpdatedUpdated Microsoft Defender documentation in defender-xdr/compare-rbac-roles.md.
Create Custom Rbac Roles
UpdatedUpdated Microsoft Defender documentation in defender-xdr/create-custom-rbac-roles.md.
Activate Defender Rbac
UpdatedUpdated Microsoft Defender documentation in defender-xdr/activate-defender-rbac.md.
Manage Rbac
UpdatedUpdated Microsoft Defender documentation in defender-xdr/manage-rbac.md.
Compare Rbac Roles
UpdatedUpdated Microsoft Defender documentation in defender-xdr/compare-rbac-roles.md.
Automatic Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
New Microsoft Secure Score recommendations for Microsoft Defender for Endpoint will roll out in public preview from late February to mid-March 2026. They include SMB server hardening and blocking file transfer over RDP. Recommendations are off by default and require admin action to enable.
Microsoft Defender for Endpoint
88 updatesDevice Control Report
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/device-control-report.md.
Device Control Report
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/device-control-report.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Device Control Report
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/device-control-report.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Manage Gradual Rollout
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/manage-gradual-rollout.md.
Managing Exclusions
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/managing-exclusions.md.
Managing Exclusions
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/managing-exclusions.md.
Managing Exclusions
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/managing-exclusions.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Updated Microsoft Defender documentation in defender-endpoint/standard-device-connectivity-urls-gov.md.
Updated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Updated Microsoft Defender documentation in defender-endpoint/evaluate-mda-using-mde-security-settings-management.md.
Updated Microsoft Defender documentation in defender-endpoint/evaluate-mda-using-mde-security-settings-management.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-machines-security-baseline.md.
Updated Microsoft Defender documentation in defender-endpoint/evaluate-mdav-using-gp.md.
Evaluate Mdav Using Gp
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/evaluate-mdav-using-gp.md.
Configure Endpoints Vdi
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/configure-endpoints-vdi.md.
Updated Microsoft Defender documentation in defender-endpoint/standard-device-connectivity-urls-commercial.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-machines-onboarding.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-machines-onboarding.md.
Updated Microsoft Defender documentation in defender-endpoint/standard-device-connectivity-urls-gov.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Configure Endpoints Vdi
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/configure-endpoints-vdi.md.
Switch To Mde Phase 3
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/switch-to-mde-phase-3.md.
Configure Endpoints Vdi
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/configure-endpoints-vdi.md.
Configure Endpoints Vdi
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/configure-endpoints-vdi.md.
Mde P1 Setup Configuration
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-p1-setup-configuration.md.
Updated Microsoft Defender documentation in defender-endpoint/standard-device-connectivity-urls-commercial.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Switch To Mde Phase 2
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/switch-to-mde-phase-2.md.
Configure Endpoints Vdi
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/configure-endpoints-vdi.md.
Linux Install Manually
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/linux-install-manually.md.
Linux Support Events
RemovedRemoved Microsoft Defender documentation in defender-endpoint/linux-support-events.md.
Updated Microsoft Defender documentation in defender-endpoint/switch-to-mde-phase-2.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-machines-security-baseline.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/evaluate-mdav-using-gp.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/standard-device-connectivity-urls-commercial.md.
Configure Endpoints Vdi
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/configure-endpoints-vdi.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-commercial.md.
Tamper Resiliency
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/tamper-resiliency.md.
Configure Endpoints Vdi
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/configure-endpoints-vdi.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-machines-onboarding.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-gov.md.
Whats New Mde Archive
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/whats-new-mde-archive.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Configure Endpoints Vdi
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/configure-endpoints-vdi.md.
Configure Endpoints Vdi
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/configure-endpoints-vdi.md.
Configure Endpoints Vdi
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/configure-endpoints-vdi.md.
Configure Endpoints Vdi
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/configure-endpoints-vdi.md.
Configure Endpoints Vdi
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/configure-endpoints-vdi.md.
Configure Endpoints Vdi
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/configure-endpoints-vdi.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-commercial.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-commercial.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Whats New Mde Archive
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/whats-new-mde-archive.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Linux Install Manually
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/linux-install-manually.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Removed Microsoft Defender documentation in defender-endpoint/linux-offboard-linux-endpoints.md.
Updated Microsoft Defender documentation in defender-endpoint/enable-attack-surface-reduction.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-deployment-test.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-reference.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-deployment.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-enable.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-report.md.
Updated Microsoft Defender documentation in defender-endpoint/defender-endpoint-demonstration-attack-surface-reduction-rules.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-deployment.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-reference.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-enable.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-report.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-deployment-test.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-deployment-plan.md.
Updated Microsoft Defender documentation in defender-endpoint/mde-p1-setup-configuration.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-deployment-plan.md.
Run Advanced Query Api
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/api/run-advanced-query-api.md.
Microsoft Defender for Office 365
17 updatesUpdated Microsoft Defender documentation in defender-office-365/detect-and-remediate-illicit-consent-grants.md.
Updated Microsoft Defender documentation in defender-office-365/defender-for-office-365-whats-new.md.
Updated Microsoft Defender documentation in defender-office-365/detect-and-remediate-outlook-rules-forms-attack.md.
Siem Server Integration
UpdatedUpdated Microsoft Defender documentation in defender-office-365/siem-server-integration.md.
Added Microsoft Defender documentation in defender-office-365/mdo-support-teams-about.md.
Mdo Support Teams About
UpdatedUpdated Microsoft Defender documentation in defender-office-365/mdo-support-teams-about.md.
Updated Microsoft Defender documentation in defender-office-365/tenant-allow-block-list-teams-domains-configure.md.
Updated Microsoft Defender documentation in defender-office-365/attack-simulation-training-payloads.md.
Removed Microsoft Defender documentation in defender-office-365/attack-simulation-training-teams.md.
Mdo Support Teams About
UpdatedUpdated Microsoft Defender documentation in defender-office-365/mdo-support-teams-about.md.
Mdo Support Teams About
RemovedRemoved Microsoft Defender documentation in defender-office-365/mdo-support-teams-about.md.
Mdo Support Teams About
UpdatedUpdated Microsoft Defender documentation in defender-office-365/mdo-support-teams-about.md.
Mdo Support Teams About
UpdatedUpdated Microsoft Defender documentation in defender-office-365/mdo-support-teams-about.md.
Updated Microsoft Defender documentation in defender-office-365/mdo-support-teams-sec-ops-guide.md.
Updated Microsoft Defender documentation in defender-office-365/mdo-support-teams-sec-ops-guide.md.
Updated Microsoft Defender documentation in defender-office-365/mdo-support-teams-sec-ops-guide.md.
Updated Microsoft Defender documentation in defender-office-365/submissions-user-reported-messages-custom-mailbox.md.
Microsoft Defender for Identity
40 updatesUpdated Microsoft Defender documentation in defender-for-identity/deploy/prerequisites-sensor-version-3.md.
Updated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Updated Microsoft Defender documentation in defender-for-identity/dashboard.md.
Updated Microsoft Defender documentation in defender-for-identity/sail-point-overview.md.
Updated Microsoft Defender documentation in defender-for-identity/security-testing-best-practices.md.
Updated Microsoft Defender documentation in defender-for-identity/security-testing-best-practices.md.
Updated Microsoft Defender documentation in defender-for-identity/security-testing-best-practices.md.
Updated Microsoft Defender documentation in defender-for-identity/dashboard.md.
Updated Microsoft Defender documentation in defender-for-identity/investigate-non-human-identities.md.
Updated Microsoft Defender documentation in defender-for-identity/sail-point-overview.md.
Added Microsoft Defender documentation in defender-for-identity/investigate-non-human-identities.md.
Identity inventory
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/identity-inventory.md.
View the Identity inventory
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/identity-inventory.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-windows-event-collection.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-windows-event-collection.md.
Connect Sail Point
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/connect-sail-point.md.
Identity Inventory
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/identity-inventory.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/active-directory-federation-services.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/active-directory-federation-services.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-windows-event-collection.md.
Identity Inventory
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/identity-inventory.md.
Identity Inventory
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/identity-inventory.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/active-directory-federation-services.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-windows-event-collection.md.
Identity Inventory
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/identity-inventory.md.
Identity Inventory
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/identity-inventory.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/active-directory-federation-services.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/active-directory-federation-services.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/active-directory-federation-services.md.
Identity Inventory
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/identity-inventory.md.
Updated Microsoft Defender documentation in defender-for-identity/manage-related-identities-accounts.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-windows-event-collection.md.
Investigate Assets
RemovedRemoved Microsoft Defender documentation in defender-for-identity/investigate-assets.md.
Removed Microsoft Defender documentation in defender-for-identity/investigate-non-human-identities.md.
Identity inventory
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/identity-inventory.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-windows-event-collection.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-windows-event-collection.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-windows-event-collection.md.
Microsoft Defender for Cloud Apps
2 updatesUpdated Microsoft Defender documentation in defender-for-cloud-apps/release-notes.md.
Accounts
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/accounts.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in exposure-management/whats-new.md.
Fixed Reported Inaccuracies
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/fixed-reported-inaccuracies.md.
Microsoft Sentinel Onboard
UpdatedUpdated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
