Updated Microsoft Defender documentation in defender-xdr/start-using-mdex-xdr.md.
Day in brief
Predefined classifications - Microsoft Security Research leads 78 Defender updates
25 March 2026 recorded 77 updated Microsoft Defender documentation changes and 1 relevant Message Center announcement. The most active areas were Endpoint, Defender XDR, Identity.
- Predefined classifications - Microsoft Security Research
Exposure Management · Vulnerabilities and exposureUpdated Microsoft Defender documentation in exposure-management/predefined-classification-rules-and-levels.md.
- Migrate Devices Streamlined
Endpoint · Endpoint protectionUpdated Microsoft Defender documentation in defender-endpoint/migrate-devices-streamlined.md.
- How Microsoft Defender for Identity protects your SailPoint Identity Security Cloud accounts (Preview)
Identity · Identity protectionUpdated Microsoft Defender documentation in defender-for-identity/sail-point-overview.md.
- Coverage Maturity
Defender XDR · Identity protectionUpdated Microsoft Defender documentation in defender-xdr/identity-security/coverage-maturity.md.
- Notice: Security Copilot will be included as part of your Microsoft 365 E5 plan soon
Defender XDR · Architecture and deploymentSecurity Copilot will be included with Microsoft 365 E5 via a phased rollout from April 20 to June 30, 2026, providing 400 Security Compute Units per 1,000 users and core agentic features across Microsoft security products. Additional advanced capabilities may incur extra costs.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
78 updates
Microsoft Defender XDR
33 updatesUpdated Microsoft Defender documentation in defender-xdr/m365d-response-actions-notifications.md.
Updated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption-exclusions.md.
Threat Analytics
UpdatedUpdated Microsoft Defender documentation in defender-xdr/threat-analytics.md.
Create Custom Rbac Roles
UpdatedUpdated Microsoft Defender documentation in defender-xdr/create-custom-rbac-roles.md.
Edit Delete Rbac Roles
UpdatedUpdated Microsoft Defender documentation in defender-xdr/edit-delete-rbac-roles.md.
Updated Microsoft Defender documentation in defender-xdr/configure-email-notifications.md.
Manage Rbac
UpdatedUpdated Microsoft Defender documentation in defender-xdr/manage-rbac.md.
Activate Defender Rbac
UpdatedUpdated Microsoft Defender documentation in defender-xdr/activate-defender-rbac.md.
Updated Microsoft Defender documentation in defender-xdr/configure-email-notifications.md.
Dex Xdr Permissions
UpdatedUpdated Microsoft Defender documentation in defender-xdr/dex-xdr-permissions.md.
Import Rbac Roles
UpdatedUpdated Microsoft Defender documentation in defender-xdr/import-rbac-roles.md.
Updated Microsoft Defender documentation in defender-xdr/m365d-notifications-incidents.md.
Updated Microsoft Defender documentation in defender-xdr/microsoft-secure-score-whats-new.md.
Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-xdr/prerequisites.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-xdr/whats-new.md.
Activate Defender Rbac
UpdatedUpdated Microsoft Defender documentation in defender-xdr/activate-defender-rbac.md.
Threat Analytics
UpdatedUpdated Microsoft Defender documentation in defender-xdr/threat-analytics.md.
Updated Microsoft Defender documentation in defender-xdr/streaming-api-event-hub.md.
Custom Detection Rules
UpdatedUpdated Microsoft Defender documentation in defender-xdr/custom-detection-rules.md.
Advanced Hunting Limits
UpdatedUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-limits.md.
Advanced Hunting Take Action
UpdatedUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-take-action.md.
Updated Microsoft Defender documentation in defender-xdr/custom-detection-rules.md.
Advanced Hunting Limits
UpdatedUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-limits.md.
Coverage Maturity
UpdatedUpdated Microsoft Defender documentation in defender-xdr/identity-security/coverage-maturity.md.
Updated Microsoft Defender documentation in defender-xdr/m365d-configure-auto-investigation-response.md.
Updated Microsoft Defender documentation in defender-xdr/m365d-autoir-actions.md.
M365d Action Center
UpdatedUpdated Microsoft Defender documentation in defender-xdr/m365d-action-center.md.
Troubleshoot
UpdatedUpdated Microsoft Defender documentation in defender-xdr/troubleshoot.md.
Troubleshoot
UpdatedUpdated Microsoft Defender documentation in defender-xdr/troubleshoot.md.
Security Copilot will be included with Microsoft 365 E5 via a phased rollout from April 20 to June 30, 2026, providing 400 Security Compute Units per 1,000 users and core agentic features across Microsoft security products. Additional advanced capabilities may incur extra costs.
Streaming Api Storage
UpdatedUpdated Microsoft Defender documentation in defender-xdr/streaming-api-storage.md.
Get Started Xdr
UpdatedUpdated Microsoft Defender documentation in defender-xdr/get-started-xdr.md.
Microsoft Defender for Endpoint
33 updatesMigrate Devices Streamlined
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/migrate-devices-streamlined.md.
Updated Microsoft Defender documentation in defender-endpoint/evaluate-mda-using-mde-security-settings-management.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-antivirus-updates.md.
Mde Sap Windows Server
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-sap-windows-server.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-antivirus-windows.md.
Evaluate Mdav Using Gp
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/evaluate-mdav-using-gp.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Updated Microsoft Defender documentation in defender-endpoint/command-line-arguments-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/standard-device-connectivity-urls-commercial.md.
Linux Install Manually
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/linux-install-manually.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-extension-file-exclusions-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-network-connections-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/defender-endpoint-false-positives-negatives.md.
Ios Install
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/ios-install.md.
Updated Microsoft Defender documentation in defender-endpoint/linux-offboard-endpoints.md.
Respond Machine Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Review Detected Threats
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/review-detected-threats.md.
Updated Microsoft Defender documentation in defender-endpoint/run-scan-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/standard-device-connectivity-urls-commercial.md.
Updated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-commercial.md.
Collect Diagnostic Data
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/collect-diagnostic-data.md.
Updated Microsoft Defender documentation in defender-endpoint/enable-update-mdav-to-latest-ws.md.
Respond File Alerts
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/respond-file-alerts.md.
Updated Microsoft Defender documentation in defender-endpoint/restore-quarantined-files-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/standard-device-connectivity-urls-commercial.md.
Updated Microsoft Defender documentation in defender-endpoint/standard-device-connectivity-urls-commercial.md.
Updated Microsoft Defender documentation in defender-endpoint/standard-device-connectivity-urls-gov.md.
Tamperprotection Macos
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/tamperprotection-macos.md.
Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.
Updated Microsoft Defender documentation in defender-endpoint/device-control-deploy-manage-gpo.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-antivirus-using-powershell.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Microsoft Defender for Identity
10 updatesUpdated Microsoft Defender documentation in defender-for-identity/sail-point-overview.md.
Connect Sail Point
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/connect-sail-point.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/active-directory-federation-services.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-windows-event-collection.md.
Connect Sail Point
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/connect-sail-point.md.
Sail Point Overview
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/sail-point-overview.md.
Connect Sail Point
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/connect-sail-point.md.
Connect Sail Point
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/connect-sail-point.md.
Connect Sail Point
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/connect-sail-point.md.
Whats New Archive
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/whats-new-archive.md.
Updated Microsoft Defender documentation in exposure-management/predefined-classification-rules-and-levels.md.
Updated Microsoft Defender documentation in exposure-management/predefined-classification-rules-and-levels.md.