Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-migrate-from-mde.md.
Develop Microsoft Sentinel Advanced Security Information Model (ASIM) parsers | Microsoft Docs leads 379 Defender updates
Week of 22 June 2026 recorded 20 new, 339 updated, 18 removed Microsoft Defender documentation changes and 2 relevant Message Center announcements. The most active areas were Sentinel, Cloud Apps, Defender XDR.
- Develop Microsoft Sentinel Advanced Security Information Model (ASIM) parsers | Microsoft Docs
Sentinel · Cloud and workloads
Added Microsoft Defender documentation in sentinel/isv/normalization-develop-parsers.md.
- Microsoft Defender Vulnerability Management integration with Exposure Management
Exposure Management · Vulnerabilities and exposure
Updated Microsoft Defender documentation in exposure-management/vulnerability-management-integration.md.
- Migrate advanced hunting queries from Microsoft Defender for Endpoint
Defender XDR · Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-migrate-from-mde.md.
- Security Operations guide for email authentication in Microsoft 365
Office 365 · Email and collaboration
Updated Microsoft Defender documentation in defender-office-365/email-auth-sec-ops-guide.md.
- SaaS Security Posture Management (SSPM) in Microsoft Defender for Cloud Apps
Cloud Apps · Cloud and workloads
Updated Microsoft Defender documentation in defender-for-cloud-apps/posture-overview.md.
Review the linked Microsoft Learn changes that apply to your managed platforms, policies, applications, and rollout plans. The archive preserves the source diff for verification.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
Updates this week
Microsoft Defender XDR
33 updatesUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-find-ransomware.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-custom-functions.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-defender-use-custom-rules.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-defender-results.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-limits.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-extend-data.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-deviceevents-table.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicefileevents-table.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-deviceimageloadevents-table.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicelogonevents-table.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-devicenetworkevents-table.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-deviceregistryevents-table.md.
Microsoft Defender for Cloud Apps is replacing the legacy “Activity performed by terminated user” alert with a dynamic detection model called "Activity by a deprovisioned user (preview)" starting late June 2026. This improves detection accuracy, adapts to threats, requires no manual setup, and may change alert behavior over time.
Added Microsoft Defender documentation in defender-xdr/entity-page-threat-intelligence.md.
Updated Microsoft Defender documentation in defender-xdr/defender-threat-intelligence.md.
Entity Page Ip
UpdatedUpdated Microsoft Defender documentation in defender-xdr/entity-page-ip.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-go-hunt.md.
Updated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption-exclusions.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-xdr/whats-new.md.
Updated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption-exclusions.md.
Investigate Alerts
UpdatedUpdated Microsoft Defender documentation in defender-xdr/investigate-alerts.md.
Automatic Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Updated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption-exclusions.md.
Phishing Triage Agent
UpdatedUpdated Microsoft Defender documentation in defender-xdr/phishing-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/access-den-graph-api.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-link-to-incident.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-link-to-incident.md.
Automatic Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Shield Predict Threats
UpdatedUpdated Microsoft Defender documentation in defender-xdr/shield-predict-threats.md.
The 2026 Microsoft 365 Packaging Update, rolling out mid-June to early August, adds enhanced security features like Microsoft Defender Plan 1, URL time-of-click protection, Intune improvements, and +50GB Exchange Online storage. Microsoft 365 Business SKU backfill completes by September 30. Admins should review and configure new policies.
Automatic Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Updated Microsoft Defender documentation in defender-xdr/troubleshoot.md.
Microsoft Defender for Endpoint
10 updatesAdded Microsoft Defender documentation in defender-endpoint/device-inventory-field-reference.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/defender-endpoint-demonstration-attack-surface-reduction-rules.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Microsoft Defender for Office 365
20 updatesUpdated Microsoft Defender documentation in defender-office-365/step-by-step-guides/defense-in-depth-guide.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/assess-the-impact-of-security-configuration-changes-with-explorer.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/tune-bulk-mail-filtering-walkthrough.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/understand-overrides-in-email-entity.md.
Updated Microsoft Defender documentation in defender-office-365/submissions-report-messages-files-to-microsoft.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/utilize-microsoft-defender-for-office-365-in-sharepoint-online.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/tune-microsoft-defender-for-office-365.md.
Updated Microsoft Defender documentation in defender-office-365/protection-stack-microsoft-defender-for-office365.md.
Updated Microsoft Defender documentation in defender-office-365/email-auth-sec-ops-guide.md.
Updated Microsoft Defender documentation in defender-office-365/email-authentication-arc-configure.md.
Updated Microsoft Defender documentation in defender-office-365/email-authentication-dkim-configure.md.
Updated Microsoft Defender documentation in defender-office-365/advanced-delivery-policy-configure.md.
Updated Microsoft Defender documentation in defender-office-365/anti-spam-policies-configure.md.
Updated Microsoft Defender documentation in defender-office-365/anti-phishing-policies-eop-configure.md.
Updated Microsoft Defender documentation in defender-office-365/anti-phishing-policies-mdo-configure.md.
Updated Microsoft Defender documentation in defender-office-365/anti-malware-policies-configure.md.
Updated Microsoft Defender documentation in defender-office-365/attack-simulation-training-simulations.md.
Anti Phishing Policies About
UpdatedUpdated Microsoft Defender documentation in defender-office-365/anti-phishing-policies-about.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/review-allow-entries.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/reducing-attack-surface-in-microsoft-teams.md.
Microsoft Defender for Identity
27 updatesUpdated Microsoft Defender documentation in defender-for-identity/dashboard.md.
Updated Microsoft Defender documentation in defender-for-identity/connect-sail-point.md.
Updated Microsoft Defender documentation in defender-for-identity/investigate-security-alerts.md.
Migrate To Sensor V3
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/deploy/migrate-to-sensor-v3.md.
Updated Microsoft Defender documentation in defender-for-identity/alerts-xdr.md.
Updated Microsoft Defender documentation in defender-for-identity/connect-cyber-ark.md.
Updated Microsoft Defender documentation in defender-for-identity/entity-tags.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/install-sensor.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-event-collection.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-windows-event-collection.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-sensor-settings.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/create-directory-service-account-gmsa.md.
Updated Microsoft Defender documentation in defender-for-identity/configure-scoped-access.md.
Manage action accounts
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/deploy/manage-action-accounts.md.
Updated Microsoft Defender documentation in defender-for-identity/manage-related-identities-accounts.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/activate-sensor.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-proxy.md.
Updated Microsoft Defender documentation in defender-for-identity/exclusions.md.
Configure sensors for AD FS, AD CS, and Microsoft Entra Connect | Microsoft Defender for Identity
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/deploy/active-directory-federation-services.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-event-forwarding.md.
Updated Microsoft Defender documentation in defender-for-identity/health-alerts.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/test-connectivity.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-port-mirroring.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/test-sensor.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/capacity-planning.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/deploy-sensor-v3.md.
Updated Microsoft Defender documentation in defender-for-identity/advanced-settings.md.
Microsoft Defender for Cloud Apps
92 updatesUpdated Microsoft Defender documentation in defender-for-cloud-apps/posture-overview.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/investigate.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/saas-security-initiative.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/ems-cloud-app-security-govt-service-byok.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/risk-score.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-egnyte.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/caac-known-issues.md.
Use Defender for Cloud Apps Conditional Access app control | Microsoft Defender for Cloud Apps
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/conditional-access-app-control-how-to-overview.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/policies-information-protection.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/log-collector-advanced-management.md.
Cloud discovery policies
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/policies-cloud-discovery.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/discovery-docker-windows.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-google-workspace.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-netdocuments.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-salesforce.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/apps-manual-onboarding-with-microsoft-entra-id.md.
Governing connected apps
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/governance-actions.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/investigate-anomaly-alerts.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-office-365.md.
Generic SIEM integration
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/siem.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-docusign.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/enable-instant-visibility-protection-and-governance-actions-for-your-apps.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/azip-integration.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/policies-threat-protection.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/control-cloud-apps-with-policies.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-workday.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/siem-sentinel.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-onelogin.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/manage-app-permissions.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-miro.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/cloud-discovery-anonymizer.md.
Configure automatic log upload using on-premises Docker on Linux | Microsoft Defender for Cloud Apps
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/discovery-docker-ubuntu.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-atlassian.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-github.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-workplace.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-citrix-sharefile.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/mde-govern.md.
Manage app governance alerts
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-manage-alerts.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-aws.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-gcp.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-mural.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/discovery-docker-ubuntu-azure.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/discovered-app-queries.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/data-protection-policies.md.
Govern discovered apps
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/governance-discovery.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/mde-integration.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-asana.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-box.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-webex.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-app-policies-get-started.md.
Investigate apps discovered by Microsoft Defender for Endpoint | Microsoft Defender for Cloud Apps
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/mde-investigation.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-investigate-predefined-policies.md.
Predefined app policies
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-predefined-policies.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-azure.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-slack.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-zendesk.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/create-snapshot-cloud-discovery-reports.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-smartsheet.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-secure-apps-app-hygiene-features.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/discovery-docker.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-app-policies-create.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/session-policy-aad.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-dropbox.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/manage-admins.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/user-activity-policies.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-permission-policy.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-okta.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-get-started.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/cloud-discovery-custom-apps.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/cloud-discovery-policies.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-visibility-insights-sensitive-content.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-visibility-insights-get-started.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/discovered-apps.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-zoom.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/in-browser-protection.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/scoped-deployment.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/dcs-inspection.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/submit-app-catalog-update-request.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-visibility-insights-view-apps.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/proxy-idp-okta.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/proxy-idp-pingone.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/proxy-idp-adfs.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/proxy-deployment-any-app-idp.md.
Identity-managed devices with Conditional Access app control | Microsoft Defender for Cloud Apps
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/conditional-access-app-control-identity.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/mail-settings.md.
Basic setup
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/general-setup.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-secure-apps-access-non-graph-api.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/discovered-apps-api-graph.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-servicenow.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/attack-paths.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/behaviors.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/flow-integration.md.
Microsoft Defender for Cloud
12 updatesUpdated Microsoft Defender documentation in defender-for-cloud/review-security-recommendations.md.
Updated Microsoft Defender documentation in defender-for-cloud/agentless-vulnerability-assessment-azure.md.
Updated Microsoft Defender documentation in defender-for-cloud/alerts-sql-database-and-azure-synapse-analytics.md.
Updated Microsoft Defender documentation in defender-for-cloud/support-matrix-defender-for-containers.md.
Updated Microsoft Defender documentation in defender-for-cloud/alerts-sql-database-and-azure-synapse-analytics.md.
Updated Microsoft Defender documentation in defender-for-cloud/release-notes-recommendations-alerts.md.
Updated Microsoft Defender documentation in defender-for-cloud/release-notes-recommendations-alerts.md.
Updated Microsoft Defender documentation in defender-for-cloud/release-notes-recommendations-alerts.md.
Manage Attack Path
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud/how-to-manage-attack-path.md.
Regional Availability
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud/regional-availability.md.
Release Notes
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud/release-notes.md.
Updated Microsoft Defender documentation in defender-for-cloud/support-matrix-defender-for-containers.md.
Microsoft Defender for IoT
33 updatesUpdated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-manage-subscriptions.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-manage-sensors-on-the-cloud.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-manage-cloud-alerts.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/device-builders/upgrade-micro-agent.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-control-what-traffic-is-monitored.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/legacy-central-management/manage-users-on-premises-management-console.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-work-with-threat-intelligence-packages.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/manage-users-portal.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/configure-reverse-dns-lookup.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-manage-device-inventory-for-organizations.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-create-attack-vector-reports.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-create-trends-and-statistics-reports.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/alerts.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-create-data-mining-queries.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/manage-subscriptions-enterprise.md.
Device Discovery
UpdatedUpdated Microsoft Defender documentation in defender-for-iot/device-discovery.md.
Manage Devices Inventory
UpdatedUpdated Microsoft Defender documentation in defender-for-iot/manage-devices-inventory.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-create-risk-assessment-reports.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-work-with-the-sensor-device-map.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/configure-sensor-settings-portal.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/connect-sensors.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/back-up-restore-sensor.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-analyze-programming-details-changes.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/detect-windows-endpoints-script.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-import-device-information.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-set-up-snmp-mib-monitoring.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-view-alerts.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/integrations/on-premises-sentinel.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-track-sensor-activity.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-investigate-sensor-detections-in-a-device-inventory.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-forward-alert-information-to-partners.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-accelerate-alert-incident-response.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/configure-windows-endpoint-monitoring.md.
Microsoft Sentinel
144 updatesMove To Defender
UpdatedUpdated Microsoft Defender documentation in sentinel/move-to-defender.md.
Added Microsoft Defender documentation in sentinel/isv/normalization-develop-parsers.md.
Added Microsoft Defender documentation in sentinel/isv/publish-sentinel-solutions.md.
Updated Microsoft Defender documentation in sentinel/datalake/notebooks.md.
Updated Microsoft Defender documentation in sentinel/datalake/notebook-examples.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-jobs-summary-rules-search-jobs.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-use-tool-security-copilot.md.
Updated Microsoft Defender documentation in sentinel/sap/deploy-sap-security-content.md.
Added Microsoft Defender documentation in sentinel/isv/create-push-codeless-connector.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-use-tool-copilot-studio.md.
Updated Microsoft Defender documentation in sentinel/datalake/custom-graphs-overview.md.
Updated Microsoft Defender documentation in sentinel/datalake/graph-visualization.md.
Added Microsoft Defender documentation in sentinel/isv/sentinel-analytic-rules-creation.md.
Added Microsoft Defender documentation in sentinel/isv/normalization-create-parsers-ai-agent.md.
Added Microsoft Defender documentation in sentinel/isv/sentinel-playbook-creation.md.
Added Microsoft Defender documentation in sentinel/isv/sentinel-summary-rules-creation.md.
Added Microsoft Defender documentation in sentinel/isv/sentinel-workbook-creation.md.
Added Microsoft Defender documentation in sentinel/isv/create-custom-connector-builder-agent.md.
Added Microsoft Defender documentation in sentinel/isv/partner-integrations.md.
Added Microsoft Defender documentation in sentinel/isv/package-platform-solution.md.
Added Microsoft Defender documentation in sentinel/isv/sentinel-solution-quality-guidance.md.
Updated Microsoft Defender documentation in sentinel/watchlists.md.
Added Microsoft Defender documentation in sentinel/isv/sentinel-integration-guide.md.
Required Abap Authorizations
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/required-abap-authorizations.md.
Added Microsoft Defender documentation in sentinel/isv/solution-setup-essentials.md.
Updated Microsoft Defender documentation in sentinel/sap/deploy-data-connector-agent-container.md.
Added Microsoft Defender documentation in sentinel/isv/manage-platform-solutions.md.
Updated Microsoft Defender documentation in sentinel/sap/preparing-sap.md.
Updated Microsoft Defender documentation in sentinel/connect-google-cloud-platform.md.
Generate Playbook
UpdatedUpdated Microsoft Defender documentation in sentinel/automation/generate-playbook.md.
Run Playbooks
UpdatedUpdated Microsoft Defender documentation in sentinel/automation/run-playbooks.md.
Create Graphs With Ai
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/create-graphs-with-ai.md.
Create Playbooks
UpdatedUpdated Microsoft Defender documentation in sentinel/automation/create-playbooks.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-data-exploration-tool.md.
Updated Microsoft Defender documentation in sentinel/datalake/data-federation-setup.md.
Work With Threat Indicators
UpdatedUpdated Microsoft Defender documentation in sentinel/work-with-threat-indicators.md.
Updated Microsoft Defender documentation in sentinel/connect-microsoft-365-defender.md.
Updated Microsoft Defender documentation in sentinel/sap/deployment-solution-configuration.md.
Using Data Federation
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/using-data-federation.md.
Updated Microsoft Defender documentation in sentinel/connect-custom-logs-ama.md.
Connect Dns Ama
UpdatedUpdated Microsoft Defender documentation in sentinel/connect-dns-ama.md.
Updated Microsoft Defender documentation in sentinel/datalake/notebook-jobs.md.
Updated Microsoft Defender documentation in sentinel/connect-azure-functions-template.md.
Updated Microsoft Defender documentation in sentinel/sap/collect-sap-hana-audit-logs.md.
Updated Microsoft Defender documentation in sentinel/business-applications/deploy-power-platform-solution.md.
Updated Microsoft Defender documentation in sentinel/connect-defender-for-cloud.md.
Updated Microsoft Defender documentation in sentinel/connect-cef-syslog-ama.md.
Soc Optimization Access
UpdatedUpdated Microsoft Defender documentation in sentinel/soc-optimization/soc-optimization-access.md.
Updated Microsoft Defender documentation in sentinel/automation/authenticate-playbooks-to-sentinel.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-agent-creation-tool.md.
Sentinel Mcp Logic Apps
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-logic-apps.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-use-tool-azure-ai-foundry.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-triage-tool.md.
Connect Microsoft Purview
UpdatedUpdated Microsoft Defender documentation in sentinel/connect-microsoft-purview.md.
Updated Microsoft Defender documentation in sentinel/datalake/workbooks-for-data-lake.md.
Updated Microsoft Defender documentation in sentinel/automation/use-playbook-templates.md.
Updated Microsoft Defender documentation in sentinel/work-with-anomaly-rules.md.
Updated Microsoft Defender documentation in sentinel/connect-azure-virtual-desktop.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-lake-connectors.md.
Updated Microsoft Defender documentation in sentinel/datalake/create-custom-graphs.md.
Updated Microsoft Defender documentation in sentinel/sap/stop-collection.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in sentinel/whats-new.md.
Updated Microsoft Defender documentation in sentinel/automation/automate-responses-with-playbooks.md.
Updated Microsoft Defender documentation in sentinel/automation/define-playbook-access-restrictions.md.
Updated Microsoft Defender documentation in sentinel/data-connection-rules-reference-azure-storage.md.
Updated Microsoft Defender documentation in sentinel/data-connection-rules-reference-gcp.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-use-tool-visual-studio-code.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in sentinel/whats-new.md.
Normalization Functions
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-functions.md.
Normalization Manage Parsers
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-manage-parsers.md.
Updated Microsoft Defender documentation in sentinel/normalization-parsers-overview.md.
Sentinel Overview
UpdatedUpdated Microsoft Defender documentation in sentinel/sentinel-overview.md.
Best Practices
UpdatedUpdated Microsoft Defender documentation in sentinel/best-practices.md.
Connect Data Sources
UpdatedUpdated Microsoft Defender documentation in sentinel/connect-data-sources.md.
Updated Microsoft Defender documentation in sentinel/connect-google-cloud-platform.md.
Data Transformation
UpdatedUpdated Microsoft Defender documentation in sentinel/data-transformation.md.
Feature Availability
UpdatedUpdated Microsoft Defender documentation in sentinel/feature-availability.md.
Normalization
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization.md.
Normalization About Parsers
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-about-parsers.md.
Updated Microsoft Defender documentation in sentinel/normalization-about-workspace-parsers.md.
Normalization Ingest Time
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-ingest-time.md.
Normalization Parsers List
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-parsers-list.md.
Manage Platform Solutions
RemovedRemoved Microsoft Defender documentation in sentinel/manage-platform-solutions.md.
Removed Microsoft Defender documentation in sentinel/normalization-create-parsers-ai-agent.md.
Removed Microsoft Defender documentation in sentinel/normalization-develop-parsers.md.
Package Platform Solution
RemovedRemoved Microsoft Defender documentation in sentinel/package-platform-solution.md.
Partner Integrations
RemovedRemoved Microsoft Defender documentation in sentinel/partner-integrations.md.
Publish Sentinel Solutions
RemovedRemoved Microsoft Defender documentation in sentinel/publish-sentinel-solutions.md.
Removed Microsoft Defender documentation in sentinel/sentinel-analytic-rules-creation.md.
Sentinel Integration Guide
RemovedRemoved Microsoft Defender documentation in sentinel/sentinel-integration-guide.md.
Sentinel Playbook Creation
RemovedRemoved Microsoft Defender documentation in sentinel/sentinel-playbook-creation.md.
Removed Microsoft Defender documentation in sentinel/sentinel-solution-quality-guidance.md.
Removed Microsoft Defender documentation in sentinel/sentinel-summary-rules-creation.md.
Sentinel Workbook Creation
RemovedRemoved Microsoft Defender documentation in sentinel/sentinel-workbook-creation.md.
Solution Setup Essentials
RemovedRemoved Microsoft Defender documentation in sentinel/solution-setup-essentials.md.
Siem Migration
UpdatedUpdated Microsoft Defender documentation in sentinel/siem-migration.md.
Updated Microsoft Defender documentation in sentinel/customize-entity-activities.md.
Updated Microsoft Defender documentation in sentinel/create-nrt-rules.md.
Updated Microsoft Defender documentation in sentinel/create-analytics-rules.md.
Updated Microsoft Defender documentation in sentinel/connect-services-windows-based.md.
Updated Microsoft Defender documentation in sentinel/create-incidents-from-alerts.md.
Updated Microsoft Defender documentation in sentinel/connect-services-diagnostic-setting-based.md.
Updated Microsoft Defender documentation in sentinel/create-analytics-rule-from-template.md.
Added Microsoft Defender documentation in sentinel/isv/create-codeless-connector.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-solution-deploy-alternate.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-lake-onboarding.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-chatgpt-claude-connector.md.
Updated Microsoft Defender documentation in sentinel/sap/deploy-command-line.md.
Updated Microsoft Defender documentation in sentinel/sap/update-sap-data-connector.md.
Updated Microsoft Defender documentation in sentinel/datalake/auditing-lake-activities.md.
Updated Microsoft Defender documentation in sentinel/data-connector-connection-rules-reference.md.
Create Custom Connector
UpdatedUpdated Microsoft Defender documentation in sentinel/create-custom-connector.md.
Updated Microsoft Defender documentation in sentinel/setup-azure-storage-connector.md.
Updated Microsoft Defender documentation in sentinel/data-connector-ui-definitions-reference.md.
Updated Microsoft Defender documentation in sentinel/monitor-data-connector-health.md.
Normalization Schema Asset
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-asset.md.
Normalization Schema Network
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-network.md.
Create Codeless Connector
RemovedRemoved Microsoft Defender documentation in sentinel/create-codeless-connector.md.
Removed Microsoft Defender documentation in sentinel/create-custom-connector-builder-agent.md.
Removed Microsoft Defender documentation in sentinel/create-push-codeless-connector.md.
Updated Microsoft Defender documentation in sentinel/connect-services-api-based.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-jobs.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-troubleshoot.md.
Updated Microsoft Defender documentation in sentinel/work-with-stix-objects-indicators.md.
Added Microsoft Defender documentation in sentinel/isv/sentinel-hunting-rules-creation.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-queries.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-queries-api.md.
Kql Sample Queries
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/kql-sample-queries.md.
Removed Microsoft Defender documentation in sentinel/sentinel-hunting-rules-creation.md.
Updated Microsoft Defender documentation in sentinel/security-alert-schema-differences.md.
Updated Microsoft Defender documentation in sentinel/automation/migrate-playbooks-to-automation-rules.md.
Updated Microsoft Defender documentation in sentinel/automation/create-tasks-playbook.md.
Updated Microsoft Defender documentation in sentinel/work-with-tasks.md.
Normalization Schema Alert
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-alert.md.
Updated Microsoft Defender documentation in sentinel/customize-alert-details.md.
Create Incident Manually
UpdatedUpdated Microsoft Defender documentation in sentinel/create-incident-manually.md.
Updated Microsoft Defender documentation in sentinel/dynamics-365/deploy-dynamics-365-finance-operations-solution.md.
Updated Microsoft Defender documentation in sentinel/sap/deploy-sap-btp-solution.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-lake-onboard-defender.md.
Updated Microsoft Defender documentation in sentinel/connect-azure-stack.md.
Added Microsoft Defender documentation in sentinel/isv/troubleshoot-sentinel-solutions.md.
Troubleshoot Sentinel Mcp
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/troubleshoot-sentinel-mcp.md.
Updated Microsoft Defender documentation in sentinel/azure-storage-blob-connector-troubleshoot.md.
Removed Microsoft Defender documentation in sentinel/troubleshoot-sentinel-solutions.md.
Microsoft Defender EASM
5 updatesHost asset filters
UpdatedUpdated Microsoft Defender documentation in easm/host-asset-filters.md.
ASN asset filters
UpdatedUpdated Microsoft Defender documentation in easm/asn-asset-filters.md.
IP address asset filters
UpdatedUpdated Microsoft Defender documentation in easm/ip-address-asset-filters.md.
IP block asset filters
UpdatedUpdated Microsoft Defender documentation in easm/ip-block-asset-filters.md.
Updated Microsoft Defender documentation in easm/ssl-certificate-asset-filters.md.
Updated Microsoft Defender documentation in exposure-management/vulnerability-management-integration.md.
Updated Microsoft Defender documentation in exposure-management/get-started-exposure-management.md.
Updated Microsoft Defender documentation in exposure-management/microsoft-security-exposure-management.md.
