Microsoft Defender for Cloud
Cloud and workloads

Release Notes

In brief

Microsoft Defender for Storage on-demand malware scanning can now target individual blobs or files, containers or file shares, or objects matching a path prefix. REST API filters define the scope; without filters, the entire storage account is scanned.

What Defender admins need to know

Administrators can use targeted scans to focus malware checks on selected storage items instead of scanning the full account.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

https://aka.ms/mdc/rss

October 2026

DateCategoryUpdate
October 5, 2026GAOn-demand malware scanning now supports scanning specific blobs, files, containers, and file shares

On-demand malware scanning now supports scanning specific blobs, files, containers, and file shares (GA)

October 5, 2026

On-demand malware scanning in Microsoft Defender for Storage now supports targeted scanning of specific items. Instead of scanning an entire storage account, you can scope scans to a single blob or file, a specific container or file share, or all objects matching a path prefix.

You can use filters in the REST API request body to specify which items to scan. When no filters are provided, the scan covers the entire storage account.

Learn more about on-demand malware scanning.

September 2026

| Date | Category | Update |