Daily Defender NewsWeek of 30 March 2026 recorded 3 new, 88 updated, 3 removed Microsoft Defender documentation changes and 2 relevant Message Center announcements. The most active areas were Endpoint, Office 365, Defender XDR.
Endpoint · Vulnerabilities and exposureUpdated Microsoft Defender documentation in defender-endpoint/migrating-asr-rules.md.
Identity · Identity protectionUpdated Microsoft Defender documentation in defender-for-identity/security-posture-assessments/accounts.md.
Office 365 · Email and collaborationUpdated Microsoft Defender documentation in defender-office-365/mdo-support-teams-sec-ops-guide.md.
Vulnerability Management · GeneralUpdated Microsoft Defender documentation in defender-vulnerability-management/fixed-reported-inaccuracies.md.
Defender XDR · GeneralMicrosoft Defender XDR will add an AI-powered Email summary via Security Copilot on the Email entity page, launching in public preview mid-April 2026 and generally available by mid-May 2026. It provides concise threat insights, timeline analysis, URL and attachment assessments, requiring Security Copilot access and SCUs.
Review the linked Microsoft Learn changes that apply to your managed platforms, policies, applications, and rollout plans. The archive preserves the source diff for verification.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
Microsoft Defender XDR will add an AI-powered Email summary via Security Copilot on the Email entity page, launching in public preview mid-April 2026 and generally available by mid-May 2026. It provides concise threat insights, timeline analysis, URL and attachment assessments, requiring Security Copilot access and SCUs.
Updated Microsoft Defender documentation in defender-xdr/experts-on-demand.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-urlclickevents-table.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-cloudpolicyenforcementevents-table.md.
Updated Microsoft Defender documentation in defender-xdr/start-using-mdex-xdr.md.
Updated Microsoft Defender documentation in defender-xdr/exclude-analytics-rules-correlation.md.
Updated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Updated Microsoft Defender documentation in defender-xdr/communicate-defender-experts-xdr.md.
Updated Microsoft Defender documentation in defender-xdr/alert-policies.md.
Updated Microsoft Defender documentation in defender-xdr/alert-policies.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-graph.md.
Microsoft Secure Score will add a new recommendation to block outbound traffic from mshta.exe in Microsoft Defender for Endpoint, starting public preview in late March 2026. This reduces risk from attacks using mshta.exe, requires admin action to enable, and impacts compliance monitoring and data access.
Updated Microsoft Defender documentation in defender-endpoint/android-support-signin.md.
Updated Microsoft Defender documentation in defender-endpoint/migrating-asr-rules.md.
Updated Microsoft Defender documentation in defender-endpoint/evaluate-mdav-using-gp.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/run-analyzer-linux.md.
Updated Microsoft Defender documentation in defender-endpoint/tamperprotection-macos.md.
Updated Microsoft Defender documentation in defender-endpoint/run-analyzer-linux.md.
Updated Microsoft Defender documentation in defender-endpoint/run-analyzer-linux.md.
Added Microsoft Defender documentation in defender-endpoint/linux-off-board-endpoints.md.
Added Microsoft Defender documentation in defender-endpoint/linux-offboard-endpoints.md.
Added Microsoft Defender documentation in defender-endpoint/linux-off-board-endpoints.md.
Updated Microsoft Defender documentation in defender-endpoint/linux-off-board-endpoints.md.
Updated Microsoft Defender documentation in defender-endpoint/linux-off-board-endpoints.md.
Updated Microsoft Defender documentation in defender-endpoint/linux-off-board-endpoints.md.
Updated Microsoft Defender documentation in defender-endpoint/linux-offboard-endpoints.md.
Updated Microsoft Defender documentation in defender-endpoint/linux-offboard-endpoints.md.
Updated Microsoft Defender documentation in defender-endpoint/linux-off-board-endpoints.md.
Updated Microsoft Defender documentation in defender-endpoint/linux-off-board-endpoints.md.
Updated Microsoft Defender documentation in defender-endpoint/linux-off-board-endpoints.md.
Updated Microsoft Defender documentation in defender-endpoint/offboard-machines.md.
Updated Microsoft Defender documentation in defender-endpoint/offboard-machines.md.
Updated Microsoft Defender documentation in defender-endpoint/offboard-machines.md.
Updated Microsoft Defender documentation in defender-endpoint/offboard-machines.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Removed Microsoft Defender documentation in defender-endpoint/linux-off-board-endpoints.md.
Removed Microsoft Defender documentation in defender-endpoint/linux-offboard-endpoints.md.
Removed Microsoft Defender documentation in defender-endpoint/linux-offboard-endpoints.md.
Updated Microsoft Defender documentation in defender-endpoint/defender-endpoint-demonstration-attack-surface-reduction-rules.md.
Updated Microsoft Defender documentation in defender-endpoint/troubleshoot-asr-rules.md.
Updated Microsoft Defender documentation in defender-endpoint/migrating-asr-rules.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-reference.md.
Updated Microsoft Defender documentation in defender-endpoint/onboard-client.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-antivirus-using-powershell.md.
Updated Microsoft Defender documentation in defender-endpoint/troubleshoot-asr.md.
Updated Microsoft Defender documentation in defender-office-365/configure-junk-email-settings-on-exo-mailboxes.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-end-user.md.
Updated Microsoft Defender documentation in defender-office-365/mdo-support-teams-quick-configure.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-admin-manage-messages-files.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-end-user.md.
Updated Microsoft Defender documentation in defender-office-365/submissions-teams.md.
Updated Microsoft Defender documentation in defender-office-365/configure-junk-email-settings-on-exo-mailboxes.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-end-user.md.
Updated Microsoft Defender documentation in defender-office-365/mdo-support-teams-sec-ops-guide.md.
Updated Microsoft Defender documentation in defender-office-365/submissions-teams.md.
Updated Microsoft Defender documentation in defender-office-365/submissions-teams.md.
Updated Microsoft Defender documentation in defender-office-365/mdo-support-teams-quick-configure.md.
Updated Microsoft Defender documentation in defender-office-365/defender-for-office-365-whats-new.md.
Updated Microsoft Defender documentation in defender-office-365/mdo-support-teams-sec-ops-guide.md.
Updated Microsoft Defender documentation in defender-office-365/mdo-support-teams-sec-ops-guide.md.
Updated Microsoft Defender documentation in defender-office-365/mdo-support-teams-about.md.
Updated Microsoft Defender documentation in defender-office-365/defender-for-office-365-whats-new.md.
Updated Microsoft Defender documentation in defender-office-365/teams-message-entity-panel.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-admin-manage-messages-files.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-end-user.md.
Updated Microsoft Defender documentation in defender-office-365/mdo-privacy.md.
Updated Microsoft Defender documentation in defender-office-365/anti-spam-bulk-complaint-level-bcl-about.md.
Updated Microsoft Defender documentation in defender-office-365/anti-spam-bulk-complaint-level-bcl-about.md.
Updated Microsoft Defender documentation in defender-office-365/anti-spam-bulk-complaint-level-bcl-about.md.
Updated Microsoft Defender documentation in defender-office-365/anti-spam-policies-configure.md.
Updated Microsoft Defender documentation in defender-office-365/anti-spam-protection-about.md.
Updated Microsoft Defender documentation in defender-office-365/recommended-settings-for-eop-and-office365.md.
Updated Microsoft Defender documentation in defender-office-365/anti-spam-policies-configure.md.
Updated Microsoft Defender documentation in defender-office-365/anti-spam-protection-about.md.
Updated Microsoft Defender documentation in defender-office-365/recommended-settings-for-eop-and-office365.md.
Updated Microsoft Defender documentation in defender-office-365/tenant-allow-block-list-email-spoof-configure.md.
Updated Microsoft Defender documentation in defender-for-identity/security-posture-assessments/accounts.md.
Updated Microsoft Defender documentation in defender-for-identity/security-posture-assessments/accounts.md.
Updated Microsoft Defender documentation in defender-for-identity/exclusions.md.
Updated Microsoft Defender documentation in defender-for-identity/exclusions.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/install-sensor.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/create-directory-service-account-gmsa.md.
Updated Microsoft Defender documentation in defender-for-identity/exclusions.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/create-directory-service-account-gmsa.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/install-sensor.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/install-sensor.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/multi-forest.md.
Updated Microsoft Defender documentation in defender-for-identity/remediation-actions.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/proxy-intro-aad.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/tutorial-suspicious-activity.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/fixed-reported-inaccuracies.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/fixed-reported-inaccuracies.md.
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-threat-actor-naming.md.
