Updated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-detection-protection.md.
Transition to the new exposure score (Preview) in Defender Vulnerability Management leads 636 Defender updates
Week of 11 May 2026 recorded 8 new, 623 updated, 4 removed Microsoft Defender documentation changes and 1 relevant Message Center announcement. The most active areas were Sentinel, Endpoint, Defender XDR.
- Transition to the new exposure score (Preview) in Defender Vulnerability Management
Vulnerability Management · Vulnerabilities and exposure
Added Microsoft Defender documentation in defender-vulnerability-management/exposure-score-transition.md.
- Overview of attack paths in Microsoft Security Exposure Management
Exposure Management · Vulnerabilities and exposure
Updated Microsoft Defender documentation in exposure-management/work-attack-paths-overview.md.
- Power Platform Solution Security Content
Sentinel · Cloud and workloads
Updated Microsoft Defender documentation in sentinel/business-applications/power-platform-solution-security-content.md.
- Migrate from sensor v2.x to sensor v3.x (Preview)
Identity · Identity protection
Updated Microsoft Defender documentation in defender-for-identity/deploy/migrate-to-sensor-v3.md.
- Ai Agent Inventory
Defender XDR · General
Updated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-inventory.md.
Review the linked Microsoft Learn changes that apply to your managed platforms, policies, applications, and rollout plans. The archive preserves the source diff for verification.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
Updates this week
Microsoft Defender XDR
54 updatesUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-detection-protection.md.
Updated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-detection-protection.md.
Autoad Results
UpdatedUpdated Microsoft Defender documentation in defender-xdr/autoad-results.md.
Autoad Results
UpdatedUpdated Microsoft Defender documentation in defender-xdr/autoad-results.md.
Ai Agent Inventory
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-inventory.md.
Ai Agent Inventory
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-inventory.md.
Ai Agent Inventory
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-inventory.md.
Ai Agent Inventory
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-inventory.md.
Ai Agent Inventory
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-inventory.md.
Defender Security For Ai
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/defender-security-for-ai.md.
Updated Microsoft Defender documentation in defender-xdr/faq-cloud-coverage-defender-experts.md.
Updated Microsoft Defender documentation in defender-xdr/whats-new.md.
Updated Microsoft Defender documentation in defender-xdr/whats-new.md.
Ai Agent Inventory
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-inventory.md.
Defender Security For Ai
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/defender-security-for-ai.md.
Updated Microsoft Defender documentation in defender-xdr/security-copilot-in-microsoft-365-defender.md.
Updated Microsoft Defender documentation in defender-xdr/security-copilot-in-microsoft-365-defender.md.
Updated Microsoft Defender documentation in defender-xdr/autoad-results.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-xdr/whats-new.md.
Updated Microsoft Defender documentation in defender-xdr/shield-predict-threats-manage.md.
Added Microsoft Defender documentation in defender-xdr/security-analyst-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-copilot-agents-defender.md.
Updated Microsoft Defender documentation in defender-xdr/security-analyst-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-copilot-agents-defender.md.
Updated Microsoft Defender documentation in defender-xdr/security-analyst-agent.md.
Updated Microsoft Defender documentation in defender-xdr/before-you-begin-xdr.md.
Updated Microsoft Defender documentation in defender-xdr/defender-experts-scoped-coverage.md.
Updated Microsoft Defender documentation in defender-xdr/application-card-copilot-defender.md.
Updated Microsoft Defender documentation in defender-xdr/playbook-detecting-ransomware-m365-defender.md.
Updated Microsoft Defender documentation in defender-xdr/playbook-responding-ransomware-m365-defender.md.
Scoping
UpdatedUpdated Microsoft Defender documentation in defender-xdr/scoping.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-xdr/whats-new.md.
Updated Microsoft Defender documentation in defender-xdr/security-copilot-agents-defender.md.
Updated Microsoft Defender documentation in defender-xdr/phishing-triage-agent.md.
Phishing Triage Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/phishing-triage-agent.md.
Phishing Triage Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/phishing-triage-agent.md.
Phishing Triage Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/phishing-triage-agent.md.
Get Started Dex Servers
UpdatedUpdated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Dex Servers Overview
UpdatedUpdated Microsoft Defender documentation in defender-xdr/dex-servers-overview.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Get Started Dex Servers
UpdatedUpdated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-take-action.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-overview.md.
Advanced Hunting Take Action
UpdatedUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-take-action.md.
Security Alert Triage Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Security Alert Triage Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Security Alert Triage Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Automatic Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Automatic Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Updated Microsoft Defender documentation in defender-xdr/application-card-copilot-defender.md.
Autoad Results
UpdatedUpdated Microsoft Defender documentation in defender-xdr/autoad-results.md.
Microsoft Purview DLP event details will be integrated into Microsoft Graph Security APIs alongside Defender alerts, simplifying correlation, reporting, and SIEM integration. Public preview starts late May 2026; general availability begins late June 2026. This affects admins using these APIs for DLP-related alert data.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-xdr/whats-new.md.
Microsoft Defender for Endpoint
76 updatesAdded Microsoft Defender documentation in defender-endpoint/configure-ai-agent-runtime-protection.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-ai-agent-runtime-protection.md.
Protect Ai Agents Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/protect-ai-agents-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-ai-agent-runtime-protection.md.
Protect Ai Agents Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/protect-ai-agents-overview.md.
Discover Local Ai Agents
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/discover-local-ai-agents.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-ai-agent-runtime-protection.md.
Protect Ai Agents Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/protect-ai-agents-overview.md.
Protect Ai Agents Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/protect-ai-agents-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-antivirus-updates.md.
Migrate Devices Streamlined
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/migrate-devices-streamlined.md.
Updated Microsoft Defender documentation in defender-endpoint/evaluate-mda-using-mde-security-settings-management.md.
Updated Microsoft Defender documentation in defender-endpoint/elam-on-mdav.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Added Microsoft Defender documentation in defender-endpoint/discover-local-ai-agents.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Discover Local Ai Agents
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/discover-local-ai-agents.md.
Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/protect-ai-agents-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/command-line-arguments-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/restore-quarantined-files-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-network-connections-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/protect-ai-agents-overview.md.
Protect Ai Agents Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/protect-ai-agents-overview.md.
Review Detected Threats
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/review-detected-threats.md.
Evaluate Mdav Using Gp
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/evaluate-mdav-using-gp.md.
Mde Sap Windows Server
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-sap-windows-server.md.
Updated Microsoft Defender documentation in defender-endpoint/run-scan-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/enable-update-mdav-to-latest-ws.md.
Elam On Mdav
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/elam-on-mdav.md.
Collect Diagnostic Data
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/collect-diagnostic-data.md.
Updated Microsoft Defender documentation in defender-endpoint/protect-ai-agents-overview.md.
Discover Local Ai Agents
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/discover-local-ai-agents.md.
Get Ti Indicators Collection
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/api/get-ti-indicators-collection.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-antivirus-updates.md.
Switch To Mde Phase 3
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/switch-to-mde-phase-3.md.
Updated Microsoft Defender documentation in defender-endpoint/switch-to-mde-troubleshooting.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Added Microsoft Defender documentation in defender-endpoint/protect-ai-agents-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/protect-ai-agents-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Microsoft Defender Endpoint
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Added Microsoft Defender documentation in defender-endpoint/configure-wdac-script-enforcement-mde.md.
Updated Microsoft Defender documentation in defender-endpoint/schedule-antivirus-scans-linux.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Machine Groups
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/machine-groups.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Amsi On Mdav
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/amsi-on-mdav.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Updated Microsoft Defender documentation in defender-endpoint/schedule-antivirus-scans-linux.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Updated Microsoft Defender documentation in defender-endpoint/schedule-antivirus-scans-linux.md.
Updated Microsoft Defender documentation in defender-endpoint/schedule-antivirus-scans-linux.md.
Discover Local Ai Agents
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/discover-local-ai-agents.md.
Discover Local Ai Agents
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/discover-local-ai-agents.md.
Protect Ai Agents Overview
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/protect-ai-agents-overview.md.
Discover local AI agents
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/discover-local-ai-agents.md.
Updated Microsoft Defender documentation in defender-endpoint/defender-endpoint-false-positives-negatives.md.
Respond File Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-file-alerts.md.
Updated Microsoft Defender documentation in defender-endpoint/troubleshoot-security-intelligence-not-updated.md.
Updated Microsoft Defender documentation in defender-endpoint/troubleshoot-service-startup-problems.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-antivirus-using-powershell.md.
Microsoft Defender for Office 365
19 updatesReports Email Security
UpdatedUpdated Microsoft Defender documentation in defender-office-365/reports-email-security.md.
Updated Microsoft Defender documentation in defender-office-365/outbound-spam-policies-configure.md.
Updated Microsoft Defender documentation in defender-office-365/anti-spam-bulk-complaint-level-bcl-about.md.
Updated Microsoft Defender documentation in defender-office-365/email-authentication-dmarc-configure.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-shared-mailbox-messages.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-quarantine-notifications.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-quarantine-notifications.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-shared-mailbox-messages.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-quarantine-notifications.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-quarantine-notifications.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-shared-mailbox-messages.md.
Updated Microsoft Defender documentation in defender-office-365/quarantine-quarantine-notifications.md.
Air About
UpdatedUpdated Microsoft Defender documentation in defender-office-365/air-about.md.
Updated Microsoft Defender documentation in defender-office-365/safe-documents-in-e5-plus-security-about.md.
Updated Microsoft Defender documentation in defender-office-365/tenant-allow-block-list-about.md.
Updated Microsoft Defender documentation in defender-office-365/advanced-delivery-policy-configure.md.
Air About
UpdatedUpdated Microsoft Defender documentation in defender-office-365/air-about.md.
Updated Microsoft Defender documentation in defender-office-365/defender-for-office-365-whats-new.md.
Updated Microsoft Defender documentation in defender-office-365/mdo-support-teams-quick-configure.md.
Microsoft Defender for Identity
16 updatesUpdated Microsoft Defender documentation in defender-for-identity/deploy/migrate-to-sensor-v3.md.
Migrate To Sensor V3
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/deploy/migrate-to-sensor-v3.md.
Updated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Updated Microsoft Defender documentation in defender-for-identity/health-alerts.md.
Updated Microsoft Defender documentation in defender-for-identity/alerts-xdr.md.
Updated Microsoft Defender documentation in defender-for-identity/custom-account-correlation-rules.md.
Updated Microsoft Defender documentation in defender-for-identity/custom-account-correlation-rules.md.
Updated Microsoft Defender documentation in defender-for-identity/manage-related-identities-accounts.md.
Updated Microsoft Defender documentation in defender-for-identity/manage-related-identities-accounts.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Capacity Planning
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/deploy/capacity-planning.md.
Updated Microsoft Defender documentation in defender-for-identity/custom-account-correlation-rules.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/deploy-sensor-v3.md.
Microsoft Defender for IoT
7 updatesRelease Notes
UpdatedUpdated Microsoft Defender documentation in defender-for-iot-azure/device-builders/release-notes.md.
Sentinel Integration
UpdatedUpdated Microsoft Defender documentation in defender-for-iot-azure/organizations/concept-sentinel-integration.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/whats-new.md.
Release Notes
UpdatedUpdated Microsoft Defender documentation in defender-for-iot-azure/device-builders/release-notes.md.
Alert Engine Messages
UpdatedUpdated Microsoft Defender documentation in defender-for-iot-azure/organizations/alert-engine-messages.md.
Alert Engine Messages
UpdatedUpdated Microsoft Defender documentation in defender-for-iot-azure/organizations/alert-engine-messages.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/concept-enterprise.md.
Microsoft Sentinel
407 updatesUpdated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-data-exploration-tool.md.
Feature Availability
UpdatedUpdated Microsoft Defender documentation in sentinel/feature-availability.md.
Enable Data Connectors
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/enable-data-connectors.md.
Updated Microsoft Defender documentation in sentinel/business-applications/power-platform-solution-security-content.md.
Work With Threat Indicators
UpdatedUpdated Microsoft Defender documentation in sentinel/work-with-threat-indicators.md.
Updated Microsoft Defender documentation in sentinel/add-entity-to-threat-intelligence.md.
Enable Data Connectors
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/enable-data-connectors.md.
Offboard Implications
UpdatedUpdated Microsoft Defender documentation in sentinel/offboard-implications.md.
Updated Microsoft Defender documentation in sentinel/understand-threat-intelligence.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-audit-controls-workbook.md.
Updated Microsoft Defender documentation in sentinel/cef-name-mapping.md.
Updated Microsoft Defender documentation in sentinel/enable-storage-network-security.md.
Updated Microsoft Defender documentation in sentinel/sap/deploy-sap-security-content.md.
Updated Microsoft Defender documentation in sentinel/multiple-tenants-service-providers.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-audit-log-workbook.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-solution-security-content.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-btp-security-content.md.
Updated Microsoft Defender documentation in sentinel/migration-splunk-detection-rules.md.
Updated Microsoft Defender documentation in sentinel/migration-splunk-automation.md.
Updated Microsoft Defender documentation in sentinel/ama-migrate.md.
Updated Microsoft Defender documentation in sentinel/sentinel-solution.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-suspicious-configuration-security-parameters.md.
Updated Microsoft Defender documentation in sentinel/dynamics-365/dynamics-365-finance-operations-security-content.md.
Updated Microsoft Defender documentation in sentinel/business-applications/power-platform-solution-security-content.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-use-tool-security-copilot.md.
Updated Microsoft Defender documentation in sentinel/siem-migration.md.
Updated Microsoft Defender documentation in sentinel/windows-security-event-id-reference.md.
Sentinel Security Copilot
UpdatedUpdated Microsoft Defender documentation in sentinel/sentinel-security-copilot.md.
Updated Microsoft Defender documentation in sentinel/sentinel-solution-deprecation.md.
Translate raw security logs to behavioral insights using UEBA behaviors in Microsoft Sentinel
UpdatedUpdated Microsoft Defender documentation in sentinel/entity-behaviors-layer.md.
Updated Microsoft Defender documentation in sentinel/dynamics-365/dynamics-365-finance-operations-security-content.md.
Updated Microsoft Defender documentation in sentinel/automation/migrate-playbooks-to-automation-rules.md.
Updated Microsoft Defender documentation in sentinel/business-applications/power-platform-solution-security-content.md.
Sap Agent Migrate
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/sap-agent-migrate.md.
Sap Btp Security Content
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/sap-btp-security-content.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-solution-security-content.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-suspicious-configuration-security-parameters.md.
Updated Microsoft Defender documentation in sentinel/datalake/custom-graphs-overview.md.
Updated Microsoft Defender documentation in sentinel/datalake/create-custom-graphs.md.
Updated Microsoft Defender documentation in sentinel/create-push-codeless-connector.md.
Updated Microsoft Defender documentation in sentinel/threat-analytics-sentinel.md.
Updated Microsoft Defender documentation in sentinel/configure-data-transformation.md.
Updated Microsoft Defender documentation in sentinel/add-advanced-conditions-to-automation-rules.md.
Updated Microsoft Defender documentation in sentinel/add-entity-to-threat-intelligence.md.
Updated Microsoft Defender documentation in sentinel/indicators-bulk-file-import.md.
Updated Microsoft Defender documentation in sentinel/fusion.md.
Advanced threat detection with User and Entity Behavior Analytics (UEBA) in Microsoft Sentinel
UpdatedUpdated Microsoft Defender documentation in sentinel/identify-threats-with-entity-behavior-analytics.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-agent-creation-tool.md.
Updated Microsoft Defender documentation in sentinel/summary-rules.md.
Updated Microsoft Defender documentation in sentinel/anomalies-reference.md.
Updated Microsoft Defender documentation in sentinel/domain-based-essential-solutions.md.
Updated Microsoft Defender documentation in sentinel/health-audit.md.
Updated Microsoft Defender documentation in sentinel/automation/authenticate-playbooks-to-sentinel.md.
Updated Microsoft Defender documentation in sentinel/automation/run-playbooks.md.
Updated Microsoft Defender documentation in sentinel/automate-incident-handling-with-automation-rules.md.
Updated Microsoft Defender documentation in sentinel/automation/automate-responses-with-playbooks.md.
Updated Microsoft Defender documentation in sentinel/automation/automation.md.
Updated Microsoft Defender documentation in sentinel/automation/logic-apps-playbooks.md.
Updated Microsoft Defender documentation in sentinel/business-continuity-disaster-recovery.md.
Updated Microsoft Defender documentation in sentinel/datalake/troubleshoot-sentinel-mcp.md.
Updated Microsoft Defender documentation in sentinel/best-practices-data.md.
Updated Microsoft Defender documentation in sentinel/best-practices.md.
Billing Monitor Costs
UpdatedUpdated Microsoft Defender documentation in sentinel/billing-monitor-costs.md.
Updated Microsoft Defender documentation in sentinel/bring-your-own-ml.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-logic-apps.md.
Collect logs from text files with the Azure Monitor Agent and ingest to Microsoft Sentinel - AMA
UpdatedUpdated Microsoft Defender documentation in sentinel/connect-custom-logs-ama.md.
Updated Microsoft Defender documentation in sentinel/sap/collect-sap-hana-audit-logs.md.
Updated Microsoft Defender documentation in sentinel/top-workbooks.md.
Updated Microsoft Defender documentation in sentinel/compare-analytics-rules-custom-detections.md.
Updated Microsoft Defender documentation in sentinel/configure-data-retention-archive.md.
Updated Microsoft Defender documentation in sentinel/configure-content.md.
Updated Microsoft Defender documentation in sentinel/configure-fusion-rules.md.
Updated Microsoft Defender documentation in sentinel/sap/preparing-sap.md.
Updated Microsoft Defender documentation in sentinel/connect-azure-virtual-desktop.md.
Updated Microsoft Defender documentation in sentinel/configure-data-connector.md.
Updated Microsoft Defender documentation in sentinel/dynamics-365/deploy-dynamics-365-finance-operations-solution.md.
Updated Microsoft Defender documentation in sentinel/business-applications/deploy-power-platform-solution.md.
Updated Microsoft Defender documentation in sentinel/connect-aws-eks.md.
Updated Microsoft Defender documentation in sentinel/connect-aws.md.
Updated Microsoft Defender documentation in sentinel/connect-aws-s3-waf.md.
Updated Microsoft Defender documentation in sentinel/connect-azure-windows-microsoft-services.md.
Updated Microsoft Defender documentation in sentinel/connect-services-diagnostic-setting-based.md.
Updated Microsoft Defender documentation in sentinel/connect-threat-intelligence-taxii.md.
Updated Microsoft Defender documentation in sentinel/sap/deploy-data-connector-agent-container.md.
Updated Microsoft Defender documentation in sentinel/connect-threat-intelligence-tip.md.
Updated Microsoft Defender documentation in sentinel/powerbi.md.
Updated Microsoft Defender documentation in sentinel/automation/use-playbook-templates.md.
Updated Microsoft Defender documentation in sentinel/datalake/notebook-jobs.md.
Updated Microsoft Defender documentation in sentinel/automation/create-playbooks.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-create-custom-tool.md.
Updated Microsoft Defender documentation in sentinel/create-manage-use-automation-rules.md.
Updated Microsoft Defender documentation in sentinel/create-incidents-from-alerts.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-jobs.md.
Create New Watchlists
UpdatedUpdated Microsoft Defender documentation in sentinel/watchlists-create.md.
Updated Microsoft Defender documentation in sentinel/create-analytics-rule-from-template.md.
Updated Microsoft Defender documentation in sentinel/create-analytics-rules.md.
Updated Microsoft Defender documentation in sentinel/create-incident-manually.md.
Updated Microsoft Defender documentation in sentinel/customize-entity-activities.md.
Updated Microsoft Defender documentation in sentinel/data-connection-rules-reference-gcp.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-data-exploration-tool.md.
Updated Microsoft Defender documentation in sentinel/datalake/data-federation-overview.md.
Updated Microsoft Defender documentation in sentinel/delete-incident.md.
Updated Microsoft Defender documentation in sentinel/deploy-side-by-side.md.
Updated Microsoft Defender documentation in sentinel/deploy-overview.md.
Updated Microsoft Defender documentation in sentinel/enable-entity-behavior-analytics.md.
Updated Microsoft Defender documentation in sentinel/enable-sentinel-features-content.md.
Updated Microsoft Defender documentation in sentinel/sap/deployment-solution-configuration.md.
Updated Microsoft Defender documentation in sentinel/enroll-simplified-pricing-tier.md.
Updated Microsoft Defender documentation in sentinel/entities.md.
Updated Microsoft Defender documentation in sentinel/entity-pages.md.
Updated Microsoft Defender documentation in sentinel/datalake/notebooks-overview.md.
Updated Microsoft Defender documentation in sentinel/extend-sentinel-across-workspaces-tenants.md.
Updated Microsoft Defender documentation in sentinel/automation/generate-playbook.md.
Updated Microsoft Defender documentation in sentinel/geographical-availability-data-residency.md.
Updated Microsoft Defender documentation in sentinel/detection-tuning.md.
Updated Microsoft Defender documentation in sentinel/create-custom-connector-builder-agent.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-get-started.md.
Updated Microsoft Defender documentation in sentinel/sentinel-integration-guide.md.
Updated Microsoft Defender documentation in sentinel/false-positives.md.
Updated Microsoft Defender documentation in sentinel/ingestion-delay.md.
Updated Microsoft Defender documentation in sentinel/import-export-analytics-rules.md.
Updated Microsoft Defender documentation in sentinel/import-export-automation-rules.md.
Updated Microsoft Defender documentation in sentinel/connect-google-cloud-platform.md.
Updated Microsoft Defender documentation in sentinel/ingest-defender-for-cloud-incidents.md.
Updated Microsoft Defender documentation in sentinel/connect-defender-for-cloud.md.
Updated Microsoft Defender documentation in sentinel/connect-cef-syslog-ama.md.
Updated Microsoft Defender documentation in sentinel/purview-solution.md.
Updated Microsoft Defender documentation in sentinel/sap/cross-workspace.md.
Updated Microsoft Defender documentation in sentinel/investigate-cases.md.
Updated Microsoft Defender documentation in sentinel/investigate-with-ueba.md.
Updated Microsoft Defender documentation in sentinel/investigate-incidents.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-solution-log-reference.md.
Updated Microsoft Defender documentation in sentinel/log-plans.md.
Updated Microsoft Defender documentation in sentinel/billing-monitor-costs.md.
Updated Microsoft Defender documentation in sentinel/manage-platform-solutions.md.
Updated Microsoft Defender documentation in sentinel/manage-analytics-rule-templates.md.
Updated Microsoft Defender documentation in sentinel/map-data-fields-to-entities.md.
Updated Microsoft Defender documentation in sentinel/microsoft-365-defender-sentinel-integration.md.
Updated Microsoft Defender documentation in sentinel/audit-table-reference.md.
Updated Microsoft Defender documentation in sentinel/sentinel-solutions.md.
Updated Microsoft Defender documentation in sentinel/connect-data-sources.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-provider-class-reference.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-lake-overview.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-lake-service-limits.md.
Updated Microsoft Defender documentation in sentinel/entities-reference.md.
Updated Microsoft Defender documentation in sentinel/feature-availability.md.
Updated Microsoft Defender documentation in sentinel/health-table-reference.md.
Updated Microsoft Defender documentation in sentinel/microsoft-sentinel-defender-portal.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-billing.md.
Updated Microsoft Defender documentation in sentinel/sentinel-service-limits.md.
Updated Microsoft Defender documentation in sentinel/skill-up-resources.md.
Updated Microsoft Defender documentation in sentinel/sentinel-soar-content.md.
Updated Microsoft Defender documentation in sentinel/business-applications/solution-overview.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-solution-function-reference.md.
Updated Microsoft Defender documentation in sentinel/sap/solution-overview.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-btp-solution-overview.md.
Updated Microsoft Defender documentation in sentinel/solution-setup-essentials.md.
Updated Microsoft Defender documentation in sentinel/ueba-reference.md.
Updated Microsoft Defender documentation in sentinel/monitor-optimize-analytics-rule-execution.md.
Updated Microsoft Defender documentation in sentinel/monitor-analytics-rule-integrity.md.
Updated Microsoft Defender documentation in sentinel/monitor-sap-system-health.md.
Updated Microsoft Defender documentation in sentinel/monitor-automation-health.md.
Updated Microsoft Defender documentation in sentinel/monitor-data-connector-health.md.
Updated Microsoft Defender documentation in sentinel/datalake/notebook-examples.md.
Updated Microsoft Defender documentation in sentinel/sentinel-content-centralize.md.
Updated Microsoft Defender documentation in sentinel/package-platform-solution.md.
Updated Microsoft Defender documentation in sentinel/prerequisites.md.
Updated Microsoft Defender documentation in sentinel/sap/prerequisites-for-deploying-sap-continuous-threat-monitoring.md.
Updated Microsoft Defender documentation in sentinel/near-real-time-rules.md.
Updated Microsoft Defender documentation in sentinel/automation/playbook-recommendations.md.
Updated Microsoft Defender documentation in sentinel/billing-reduce-costs.md.
Updated Microsoft Defender documentation in sentinel/relate-alerts-to-incidents.md.
Updated Microsoft Defender documentation in sentinel/sap/required-abap-authorizations.md.
Updated Microsoft Defender documentation in sentinel/entity-behaviors-layer-rai-faqs.md.
Updated Microsoft Defender documentation in sentinel/roles.md.
Updated Microsoft Defender documentation in sentinel/datalake/notebooks.md.
Updated Microsoft Defender documentation in sentinel/fusion-scenario-reference.md.
Updated Microsoft Defender documentation in sentinel/scheduled-rules-overview.md.
Updated Microsoft Defender documentation in sentinel/search-jobs.md.
Updated Microsoft Defender documentation in sentinel/connect-azure-active-directory.md.
Updated Microsoft Defender documentation in sentinel/sentinel-solution-quality-guidance.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-lake-connectors.md.
Updated Microsoft Defender documentation in sentinel/customer-managed-keys.md.
Updated Microsoft Defender documentation in sentinel/datalake/data-federation-setup.md.
Updated Microsoft Defender documentation in sentinel/connect-aws-configure-environment.md.
Updated Microsoft Defender documentation in sentinel/sentinel-solutions-post-publish-tracking.md.
Stop SAP data collection
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/stop-collection.md.
Updated Microsoft Defender documentation in sentinel/connect-microsoft-365-defender.md.
Updated Microsoft Defender documentation in sentinel/connect-microsoft-purview.md.
Updated Microsoft Defender documentation in sentinel/automation/playbook-triggers-actions.md.
Updated Microsoft Defender documentation in sentinel/surface-custom-details-in-alerts.md.
Updated Microsoft Defender documentation in sentinel/cef-syslog-ama-overview.md.
Updated Microsoft Defender documentation in sentinel/threat-detection.md.
Threat intelligence
UpdatedUpdated Microsoft Defender documentation in sentinel/understand-threat-intelligence.md.
Updated Microsoft Defender documentation in sentinel/threat-intelligence-integration.md.
Updated Microsoft Defender documentation in sentinel/move-to-defender.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-triage-tool.md.
Updated Microsoft Defender documentation in sentinel/troubleshoot-analytics-rules.md.
Updated Microsoft Defender documentation in sentinel/enable-monitoring.md.
Updated Microsoft Defender documentation in sentinel/tutorial-log4j-detection.md.
Tutorial: Forward Syslog data to Microsoft Sentinel and Azure Monitor by using Azure Monitor Agent
UpdatedUpdated Microsoft Defender documentation in sentinel/forward-syslog-monitor-agent.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-use-tool-copilot-studio.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-use-tool-azure-ai-foundry.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-use-tool-visual-studio-code.md.
Updated Microsoft Defender documentation in sentinel/automation/tutorial-respond-threats-playbook.md.
Updated Microsoft Defender documentation in sentinel/connect-azure-functions-template.md.
Updated Microsoft Defender documentation in sentinel/soc-ml-anomalies.md.
Updated Microsoft Defender documentation in sentinel/datalake/using-data-federation.md.
Updated Microsoft Defender documentation in sentinel/use-matching-analytics-to-detect-threats.md.
Updated Microsoft Defender documentation in sentinel/incident-tasks.md.
Updated Microsoft Defender documentation in sentinel/use-threat-indicators-in-analytics-rules.md.
Updated Microsoft Defender documentation in sentinel/watchlists.md.
Updated Microsoft Defender documentation in sentinel/get-visibility.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-tools-overview.md.
Updated Microsoft Defender documentation in sentinel/overview.md.
What is Microsoft Sentinel?
UpdatedUpdated Microsoft Defender documentation in sentinel/sentinel-overview.md.
Updated Microsoft Defender documentation in sentinel/basic-logs-use-cases.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-lake-log-ingestion-guidance.md.
Updated Microsoft Defender documentation in sentinel/work-with-anomaly-rules.md.
Updated Microsoft Defender documentation in sentinel/multiple-workspace-view.md.
Work with near-real-time (NRT) detection analytics rules in Microsoft Sentinel | Microsoft Docs
UpdatedUpdated Microsoft Defender documentation in sentinel/create-nrt-rules.md.
Updated Microsoft Defender documentation in sentinel/work-with-threat-indicators.md.
Updated Microsoft Defender documentation in sentinel/datalake/workbooks-for-data-lake.md.
Auditing Lake Activities
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/auditing-lake-activities.md.
Billing Reduce Costs
UpdatedUpdated Microsoft Defender documentation in sentinel/billing-reduce-costs.md.
Bookmarks
UpdatedUpdated Microsoft Defender documentation in sentinel/bookmarks.md.
Updated Microsoft Defender documentation in sentinel/manage-table-tiers-retention.md.
Create Custom Graphs
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/create-custom-graphs.md.
Data Transformation
UpdatedUpdated Microsoft Defender documentation in sentinel/data-transformation.md.
Updated Microsoft Defender documentation in sentinel/manage-data-overview.md.
Prerequisites
UpdatedUpdated Microsoft Defender documentation in sentinel/prerequisites.md.
Publish Sentinel Solutions
UpdatedUpdated Microsoft Defender documentation in sentinel/publish-sentinel-solutions.md.
Updated Microsoft Defender documentation in sentinel/sentinel-analytic-rules-creation.md.
Updated Microsoft Defender documentation in sentinel/sentinel-summary-rules-creation.md.
Sentinel Workbook Creation
UpdatedUpdated Microsoft Defender documentation in sentinel/sentinel-workbook-creation.md.
Soc Optimization Access
UpdatedUpdated Microsoft Defender documentation in sentinel/soc-optimization/soc-optimization-access.md.
Soc Optimization Reference
UpdatedUpdated Microsoft Defender documentation in sentinel/soc-optimization/soc-optimization-reference.md.
Updated Microsoft Defender documentation in sentinel/automation/authenticate-playbooks-to-sentinel.md.
Updated Microsoft Defender documentation in sentinel/automation/automate-responses-with-playbooks.md.
Automation
UpdatedUpdated Microsoft Defender documentation in sentinel/automation/automation.md.
Collect Sap Hana Audit Logs
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/collect-sap-hana-audit-logs.md.
Create Playbooks
UpdatedUpdated Microsoft Defender documentation in sentinel/automation/create-playbooks.md.
Create Tasks Playbook
UpdatedUpdated Microsoft Defender documentation in sentinel/automation/create-tasks-playbook.md.
Cross Workspace
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/cross-workspace.md.
Updated Microsoft Defender documentation in sentinel/automation/define-playbook-access-restrictions.md.
Deployment Overview
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/deployment-overview.md.
Updated Microsoft Defender documentation in sentinel/sap/deployment-solution-configuration.md.
Generate Playbook
UpdatedUpdated Microsoft Defender documentation in sentinel/automation/generate-playbook.md.
Kickstart
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/reference-kickstart.md.
Logic Apps Playbooks
UpdatedUpdated Microsoft Defender documentation in sentinel/automation/logic-apps-playbooks.md.
Normalization About Parsers
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-about-parsers.md.
Normalization About Schemas
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-about-schemas.md.
Updated Microsoft Defender documentation in sentinel/normalization-about-workspace-parsers.md.
Normalization Common Fields
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-common-fields.md.
Normalization Content
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-content.md.
Updated Microsoft Defender documentation in sentinel/normalization-develop-parsers.md.
Updated Microsoft Defender documentation in sentinel/normalization-entity-application.md.
Normalization Entity Device
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-entity-device.md.
Normalization Entity User
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-entity-user.md.
Normalization Functions
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-functions.md.
Normalization Ingest Time
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-ingest-time.md.
Normalization Known Issues
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-known-issues.md.
Normalization Manage Parsers
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-manage-parsers.md.
Normalization Modify Content
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-modify-content.md.
Normalization Parsers List
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-parsers-list.md.
Updated Microsoft Defender documentation in sentinel/normalization-parsers-overview.md.
Playbook Recommendations
UpdatedUpdated Microsoft Defender documentation in sentinel/automation/playbook-recommendations.md.
Playbook Triggers Actions
UpdatedUpdated Microsoft Defender documentation in sentinel/automation/playbook-triggers-actions.md.
Preparing Sap
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/preparing-sap.md.
Updated Microsoft Defender documentation in sentinel/sap/prerequisites-for-deploying-sap-continuous-threat-monitoring.md.
Required Abap Authorizations
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/required-abap-authorizations.md.
Run Playbooks
UpdatedUpdated Microsoft Defender documentation in sentinel/automation/run-playbooks.md.
Sap Audit Controls Workbook
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/sap-audit-controls-workbook.md.
Sap Audit Log Workbook
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/sap-audit-log-workbook.md.
Sap Btp Solution Overview
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/sap-btp-solution-overview.md.
Sap Logserv Overview
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/sap-logserv-overview.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-solution-function-reference.md.
Sap Solution Log Reference
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/sap-solution-log-reference.md.
Soc Optimization Access
UpdatedUpdated Microsoft Defender documentation in sentinel/soc-optimization/soc-optimization-access.md.
Soc Optimization Reference
UpdatedUpdated Microsoft Defender documentation in sentinel/soc-optimization/soc-optimization-reference.md.
Solution Overview
UpdatedUpdated Microsoft Defender documentation in sentinel/business-applications/solution-overview.md.
Solution Overview
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/solution-overview.md.
Solution Partner Overview
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/solution-partner-overview.md.
Stop Collection
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/stop-collection.md.
Systemconfig
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/reference-systemconfig.md.
Systemconfig Json
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/reference-systemconfig-json.md.
Updated Microsoft Defender documentation in sentinel/automation/tutorial-respond-threats-playbook.md.
Update
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/reference-update.md.
Use Playbook Templates
UpdatedUpdated Microsoft Defender documentation in sentinel/automation/use-playbook-templates.md.
Ci Cd
UpdatedUpdated Microsoft Defender documentation in sentinel/ci-cd.md.
Updated Microsoft Defender documentation in sentinel/ci-cd-custom-deploy.md.
Updated Microsoft Defender documentation in sentinel/detection-lifecycle-management-recommendations.md.
Updated Microsoft Defender documentation in sentinel/detection-lifecycle-management-recommendations.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in sentinel/whats-new.md.
Updated Microsoft Defender documentation in sentinel/detection-lifecycle-management-recommendations.md.
Connect Mdti Data Connector
UpdatedUpdated Microsoft Defender documentation in sentinel/connect-mdti-data-connector.md.
Updated Microsoft Defender documentation in sentinel/configure-connector-login-detection.md.
The Advanced Security Information Model (ASIM) DHCP normalization schema reference | Microsoft Docs
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-dhcp.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-agent-migrate.md.
Updated Microsoft Defender documentation in sentinel/datalake/create-graphs-with-ai.md.
Updated Microsoft Defender documentation in sentinel/datalake/gql-reference-for-sentinel-custom-graph.md.
Updated Microsoft Defender documentation in sentinel/datalake/graph-rest-api.md.
Updated Microsoft Defender documentation in sentinel/datalake/graph-visualization.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-authentication.md.
Updated Microsoft Defender documentation in sentinel/sap/update-sap-data-connector.md.
Updated Microsoft Defender documentation in sentinel/data-connection-rules-reference-azure-storage.md.
Connect Mdti Data Connector
UpdatedUpdated Microsoft Defender documentation in sentinel/connect-mdti-data-connector.md.
Connect Microsoft Sentinel to other Microsoft services with a Windows agent-based data connector
UpdatedUpdated Microsoft Defender documentation in sentinel/connect-services-windows-based.md.
Updated Microsoft Defender documentation in sentinel/connect-services-api-based.md.
Updated Microsoft Defender documentation in sentinel/connect-threat-intelligence-upload-api.md.
Updated Microsoft Defender documentation in sentinel/sap/deploy-command-line.md.
Updated Microsoft Defender documentation in sentinel/create-codeless-connector.md.
Updated Microsoft Defender documentation in sentinel/unified-connector-custom-device.md.
Updated Microsoft Defender documentation in sentinel/data-connector-connection-rules-reference.md.
Updated Microsoft Defender documentation in sentinel/data-connector-ui-definitions-reference.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-solution-deploy-alternate.md.
Updated Microsoft Defender documentation in sentinel/geolocation-data-api.md.
Updated Microsoft Defender documentation in sentinel/data-connectors-reference.md.
Updated Microsoft Defender documentation in sentinel/stix-objects-api.md.
Updated Microsoft Defender documentation in sentinel/sap/reference-kickstart.md.
Updated Microsoft Defender documentation in sentinel/microsoft-purview-record-types-activities.md.
Updated Microsoft Defender documentation in sentinel/api-dcr-reference.md.
Microsoft Sentinel DNS over AMA connector reference - available fields and normalization schema
UpdatedUpdated Microsoft Defender documentation in sentinel/dns-ama-fields.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-graph-provider-reference.md.
Updated Microsoft Defender documentation in sentinel/sap/reference-systemconfig.md.
Updated Microsoft Defender documentation in sentinel/sap/reference-systemconfig-json.md.
Updated Microsoft Defender documentation in sentinel/sap/reference-update.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-lake-onboarding.md.
Updated Microsoft Defender documentation in sentinel/upload-indicators-api.md.
Updated Microsoft Defender documentation in sentinel/connect-dns-ama.md.
Updated Microsoft Defender documentation in sentinel/connect-logstash-data-connection-rules.md.
Updated Microsoft Defender documentation in sentinel/microsoft-365-defender-cloud-support.md.
Updated Microsoft Defender documentation in sentinel/data-type-cloud-support.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-chatgpt-claude-connector.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-graph-overview.md.
Soc Optimization Api
UpdatedUpdated Microsoft Defender documentation in sentinel/soc-optimization/soc-optimization-api.md.
Updated Microsoft Defender documentation in sentinel/sap/deploy-data-connector-agent-container.md.
Normalization Schema Asset
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-asset.md.
Normalization Schema Audit
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-audit.md.
Normalization Schema Dns
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-dns.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-file-event.md.
Normalization Schema Network
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-network.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-process-event.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-registry-event.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-user-management.md.
Normalization Schema V1
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-v1.md.
Normalization Schema Web
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-web.md.
Updated Microsoft Defender documentation in sentinel/setup-azure-storage-connector.md.
Soc Optimization Api
UpdatedUpdated Microsoft Defender documentation in sentinel/soc-optimization/soc-optimization-api.md.
Updated Microsoft Defender documentation in sentinel/sap/update-sap-data-connector.md.
Updated Microsoft Defender documentation in sentinel/migration.md.
Deploy Sap Security Content
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/deploy-sap-security-content.md.
Updated Microsoft Defender documentation in sentinel/automation/define-playbook-access-restrictions.md.
Updated Microsoft Defender documentation in sentinel/monitor-key-vault-honeytokens.md.
Updated Microsoft Defender documentation in sentinel/sap/deploy-sap-btp-solution.md.
Updated Microsoft Defender documentation in sentinel/sap/deployment-overview.md.
Updated Microsoft Defender documentation in sentinel/quickstart-onboard.md.
Updated Microsoft Defender documentation in sentinel/connect-azure-stack.md.
Updated Microsoft Defender documentation in sentinel/billing-pre-purchase-plan.md.
Updated Microsoft Defender documentation in sentinel/billing.md.
Updated Microsoft Defender documentation in sentinel/sentinel-solutions-deploy.md.
Deploy Command Line
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/deploy-command-line.md.
Updated Microsoft Defender documentation in sentinel/dynamics-365/deploy-dynamics-365-finance-operations-solution.md.
Updated Microsoft Defender documentation in sentinel/business-applications/deploy-power-platform-solution.md.
Deploy Sap Btp Solution
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/deploy-sap-btp-solution.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-solution-deploy-alternate.md.
Updated Microsoft Defender documentation in sentinel/ci-cd.md.
Ci Cd Custom Deploy
UpdatedUpdated Microsoft Defender documentation in sentinel/ci-cd-custom-deploy.md.
Updated Microsoft Defender documentation in sentinel/security-alert-schema-differences.md.
Updated Microsoft Defender documentation in sentinel/automation/migrate-playbooks-to-automation-rules.md.
Updated Microsoft Defender documentation in sentinel/sentinel-security-copilot-incident-summary.md.
Updated Microsoft Defender documentation in sentinel/audit-track-tasks.md.
Updated Microsoft Defender documentation in sentinel/incident-navigate-triage.md.
Updated Microsoft Defender documentation in sentinel/collaborate-in-microsoft-teams.md.
Updated Microsoft Defender documentation in sentinel/automation/create-tasks-playbook.md.
Updated Microsoft Defender documentation in sentinel/create-tasks-automation-rule.md.
Updated Microsoft Defender documentation in sentinel/customize-alert-details.md.
Updated Microsoft Defender documentation in sentinel/tutorial-extract-incident-entities.md.
Updated Microsoft Defender documentation in sentinel/manage-soc-with-incident-metrics.md.
Updated Microsoft Defender documentation in sentinel/incident-investigation.md.
Tutorial - Automatically check and record IP address reputation in incident in Microsoft Sentinel
UpdatedUpdated Microsoft Defender documentation in sentinel/tutorial-enrich-ip-information.md.
Updated Microsoft Defender documentation in sentinel/work-with-tasks.md.
Normalization Schema Alert
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-alert.md.
Updated Microsoft Defender documentation in sentinel/work-with-stix-objects-indicators.md.
Updated Microsoft Defender documentation in sentinel/hunts.md.
Updated Microsoft Defender documentation in sentinel/hunts-custom-queries.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-overview.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-jobs-summary-rules-search-jobs.md.
Updated Microsoft Defender documentation in sentinel/hunting-with-rest-api.md.
Manage KQL jobs
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/kql-manage-jobs.md.
Updated Microsoft Defender documentation in sentinel/respond-threats-during-investigation.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-queries.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-queries-api.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-sample-queries.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-troubleshoot.md.
Hunting
UpdatedUpdated Microsoft Defender documentation in sentinel/hunting.md.
Updated Microsoft Defender documentation in sentinel/sentinel-hunting-rules-creation.md.
Updated Microsoft Defender documentation in sentinel/aws-s3-troubleshoot.md.
Updated Microsoft Defender documentation in sentinel/azure-storage-blob-connector-troubleshoot.md.
Updated Microsoft Defender documentation in sentinel/cef-syslog-ama-troubleshooting.md.
Updated Microsoft Defender documentation in sentinel/datalake/notebooks-troubleshooting.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-deploy-troubleshoot.md.
Updated Microsoft Defender documentation in sentinel/cef-syslog-ama-troubleshooting.md.
Updated Microsoft Defender documentation in sentinel/troubleshoot-sentinel-solutions.md.
Sap Deploy Troubleshoot
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/sap-deploy-troubleshoot.md.
Updated Microsoft Defender documentation in sentinel/unified-connector.md.
Enable Data Connectors
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/enable-data-connectors.md.
Microsoft Defender EASM
20 updatesUnderstand Dashboards
UpdatedUpdated Microsoft Defender documentation in easm/understanding-dashboards.md.
Understand Asset Details
UpdatedUpdated Microsoft Defender documentation in easm/understanding-asset-details.md.
Updated Microsoft Defender documentation in easm/deploying-the-defender-easm-azure-resource.md.
Discover Your Attack Surface
UpdatedUpdated Microsoft Defender documentation in easm/discovering-your-attack-surface.md.
Updated Microsoft Defender documentation in easm/ssl-certificate-asset-filters.md.
Domain Asset Filters
UpdatedUpdated Microsoft Defender documentation in easm/domain-asset-filters.md.
Page Asset Filters
UpdatedUpdated Microsoft Defender documentation in easm/page-asset-filters.md.
ASN Asset Filters
UpdatedUpdated Microsoft Defender documentation in easm/asn-asset-filters.md.
Contact Asset Filters
UpdatedUpdated Microsoft Defender documentation in easm/contact-asset-filters.md.
Host Asset Filters
UpdatedUpdated Microsoft Defender documentation in easm/host-asset-filters.md.
IP Address Asset Filters
UpdatedUpdated Microsoft Defender documentation in easm/ip-address-asset-filters.md.
IP Block Asset Filters
UpdatedUpdated Microsoft Defender documentation in easm/ip-block-asset-filters.md.
Understand Inventory Assets
UpdatedUpdated Microsoft Defender documentation in easm/understanding-inventory-assets.md.
Use and Manage Discovery
UpdatedUpdated Microsoft Defender documentation in easm/using-and-managing-discovery.md.
Modify Inventory Assets
UpdatedUpdated Microsoft Defender documentation in easm/modifying-inventory-assets.md.
Understand Billable Assets
UpdatedUpdated Microsoft Defender documentation in easm/understanding-billable-assets.md.
Policy Engine Automation
UpdatedUpdated Microsoft Defender documentation in easm/policy-engine.md.
Updated Microsoft Defender documentation in easm/data-connections.md.
Inventory Filters Overview
UpdatedUpdated Microsoft Defender documentation in easm/inventory-filters.md.
What Is Discovery
UpdatedUpdated Microsoft Defender documentation in easm/what-is-discovery.md.
Updated Microsoft Defender documentation in exposure-management/work-attack-paths-overview.md.
Updated Microsoft Defender documentation in exposure-management/review-attack-paths.md.
Preview customers
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score.md.
Preview customers
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score.md.
Added Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score-transition.md.
Tvm Exposure Score
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score.md.
Tvm Security Recommendation
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-security-recommendation.md.
Tvm Security Recommendation
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-security-recommendation.md.
Tvm Exposure Score
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score.md.
Removed Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score-transition.md.
Preview customers
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score.md.
Tvm Exposure Score
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score.md.
Tvm Security Recommendation
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-security-recommendation.md.
Exposure Score Transition
RemovedRemoved Microsoft Defender documentation in defender-vulnerability-management/exposure-score-transition.md.
Added Microsoft Defender documentation in defender-vulnerability-management/exposure-score-transition.md.
Preview customers
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score.md.
Preview customers
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score.md.
Preview customers
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score.md.
Added Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score-transition.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score.md.
Tvm Security Recommendation
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-security-recommendation.md.
Tvm Exposure Score
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score.md.
Tvm Security Recommendation
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-security-recommendation.md.
Tvm Security Recommendation
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-security-recommendation.md.
Tvm Security Recommendation
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-security-recommendation.md.
Tvm Security Recommendation
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-security-recommendation.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score.md.
Exposure Score Transition
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/exposure-score-transition.md.
Exposure Score Transition
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/exposure-score-transition.md.
Removed Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score-transition.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-vulnerable-devices-report.md.
Preview customers
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-zero-day-vulnerabilities.md.
Security recommendations
UpdatedUpdated Microsoft Defender documentation in defender-vulnerability-management/tvm-security-recommendation.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-vulnerable-devices-report.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-vulnerable-devices-report.md.
Playbook Mssps
RemovedRemoved Microsoft Defender documentation in unified-secops-platform/playbook-mssps.md.
