Microsoft Defender for Endpoint

Collect Diagnostic Data

4 September 2026Doc update+1 / −1 lines

In brief

The investigation package guidance now links to the collection instructions using the relative `respond-machine-alerts.md` path and anchor.

What Defender admins need to know

Administrators can continue using the guidance; no configuration or operational changes are required.

Summaries are generated from the documentation change itself.

Documentation change

View full page diff

View on Microsoft Learn

The comparison below shows only the changed extract. Use the full-page view for complete context.

This article describes how to collect diagnostic data to send to Microsoft support and engineering teams when they help troubleshoot issues with Microsoft Defender Antivirus.

Note
As part of the investigation or response process, you can collect an investigation package from a device. Here's how: Collect investigation package from devices
Note
As part of the investigation or response process, you can collect an investigation package from a device. Here's how: Collect investigation package from devices.

For performance-specific issues related to Microsoft Defender Antivirus, see: Performance analyzer for Microsoft Defender Antivirus.

@@ -27,7 +27,7 @@ ai-usage: ai-assisted This article describes how to collect diagnostic data to send to Microsoft support and engineering teams when they help troubleshoot issues with Microsoft Defender Antivirus.  > [!NOTE]-> As part of the investigation or response process, you can collect an investigation package from a device. Here's how: [Collect investigation package from devices](/windows/security/threat-protection/microsoft-defender-atp/respond-machine-alerts#collect-investigation-package-from-devices).+> As part of the investigation or response process, you can collect an investigation package from a device. Here's how: [Collect investigation package from devices](respond-machine-alerts.md#collect-investigation-package-from-devices). > > For performance-specific issues related to Microsoft Defender Antivirus, see: [Performance analyzer for Microsoft Defender Antivirus](tune-performance-defender-antivirus.md).