← Previous day

Next day →
Day in brief

Migrate devices to use the streamlined onboarding method leads 1094 Defender updates

29 March 2026 recorded 1094 updated Microsoft Defender documentation changes. The most active areas were Endpoint, Defender XDR, Office 365.

This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.

1094 updates

99

Advanced Hunting Modes

Updated

Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-modes.md.

98

Security Upload Guide

Updated

Updated Microsoft Defender documentation in defender-xdr/security-upload-guide.md.

Activate Defender Rbac

Updated

Updated Microsoft Defender documentation in defender-xdr/activate-defender-rbac.md.

Auditing

Updated

Updated Microsoft Defender documentation in defender-xdr/auditing.md.

Before You Begin Xdr

Updated

Updated Microsoft Defender documentation in defender-xdr/before-you-begin-xdr.md.

Compare Rbac Roles

Updated

Updated Microsoft Defender documentation in defender-xdr/compare-rbac-roles.md.

Configure Asset Rules

Updated

Updated Microsoft Defender documentation in defender-xdr/configure-asset-rules.md.

Dex Xdr Permissions

Updated

Updated Microsoft Defender documentation in defender-xdr/dex-xdr-permissions.md.

Edit Delete Rbac Roles

Updated

Updated Microsoft Defender documentation in defender-xdr/edit-delete-rbac-roles.md.

Entity Page Device

Updated

Updated Microsoft Defender documentation in defender-xdr/entity-page-device.md.

Entity Page Ip

Updated

Updated Microsoft Defender documentation in defender-xdr/entity-page-ip.md.

Experts On Demand

Updated

Updated Microsoft Defender documentation in defender-xdr/experts-on-demand.md.

Faq Managed Response

Updated

Updated Microsoft Defender documentation in defender-xdr/faq-managed-response.md.

Import Rbac Roles

Updated

Updated Microsoft Defender documentation in defender-xdr/import-rbac-roles.md.

Manage Rbac

Updated

Updated Microsoft Defender documentation in defender-xdr/manage-rbac.md.

Microsoft Xdr Auditing

Updated

Updated Microsoft Defender documentation in defender-xdr/microsoft-xdr-auditing.md.

Mssp Access

Updated

Updated Microsoft Defender documentation in defender-xdr/mssp-access.md.

Reports Xdr

Updated

Updated Microsoft Defender documentation in defender-xdr/reports-xdr.md.

Threat Analytics

Updated

Updated Microsoft Defender documentation in defender-xdr/threat-analytics.md.

19

Api Get Incident

Updated

Updated Microsoft Defender documentation in defender-xdr/api-get-incident.md.

Update incident API

Updated

Updated Microsoft Defender documentation in defender-xdr/api-update-incidents.md.

5
5

Access Den Graph Api

Updated

Updated Microsoft Defender documentation in defender-xdr/access-den-graph-api.md.

5

Dex Xdr Overview

Updated

Updated Microsoft Defender documentation in defender-xdr/dex-xdr-overview.md.

Get Started Xdr

Updated

Updated Microsoft Defender documentation in defender-xdr/get-started-xdr.md.

2
2
1
411

Get all vulnerabilities

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-all-vulnerabilities.md.

Get vulnerability by ID

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-vulnerability-by-id.md.

Tamperprotection Macos

Updated

Updated Microsoft Defender documentation in defender-endpoint/tamperprotection-macos.md.

Admin Submissions Mde

Updated

Updated Microsoft Defender documentation in defender-endpoint/admin-submissions-mde.md.

Device inventory

Updated

Updated Microsoft Defender documentation in defender-endpoint/machines-view-overview.md.

Feedback-loop blocking

Updated

Updated Microsoft Defender documentation in defender-endpoint/feedback-loop-blocking.md.

File resource type

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/files.md.

Get all scan agents

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-all-scan-agents.md.

Get installed software

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-installed-software.md.

Get scan agent by ID

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/Get-agent-details.md.

Get scan definitions

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-all-scan-definitions.md.

Get software by ID

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-software-by-id.md.

List all recommendations

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-all-recommendations.md.

List devices by software

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-machines-by-software.md.

List library files

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/list-library-files.md.

List software

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-software.md.

Machine resource type

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/machine.md.

Manage indicators

Updated

Updated Microsoft Defender documentation in defender-endpoint/indicator-manage.md.

Offboard devices

Updated

Updated Microsoft Defender documentation in defender-endpoint/offboard-machines.md.

Run Analyzer Linux

Updated

Updated Microsoft Defender documentation in defender-endpoint/run-analyzer-linux.md.

Sign in to Jamf Pro

Updated

Updated Microsoft Defender documentation in defender-endpoint/mac-install-jamfpro-login.md.

Web content filtering

Updated

Updated Microsoft Defender documentation in defender-endpoint/web-content-filtering.md.

Web protection

Updated

Updated Microsoft Defender documentation in defender-endpoint/web-protection-overview.md.

Add A New Scan Definition

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/add-a-new-scan-definition.md.

Aggregated Reporting

Updated

Updated Microsoft Defender documentation in defender-endpoint/aggregated-reporting.md.

Amsi On Mdav

Updated

Updated Microsoft Defender documentation in defender-endpoint/amsi-on-mdav.md.

Android Configure

Updated

Updated Microsoft Defender documentation in defender-endpoint/android-configure.md.

Android New Ux

Updated

Updated Microsoft Defender documentation in defender-endpoint/android-new-ux.md.

Android Privacy

Updated

Updated Microsoft Defender documentation in defender-endpoint/android-privacy.md.

Android Support Signin

Updated

Updated Microsoft Defender documentation in defender-endpoint/android-support-signin.md.

Coinminer Malware

Updated

Updated Microsoft Defender documentation in defender-endpoint/malware/coinminer-malware.md.

Edr Detection

Updated

Updated Microsoft Defender documentation in defender-endpoint/edr-detection.md.

Endpoint Detection Response

Updated

Updated Microsoft Defender documentation in defender-endpoint/overview-endpoint-detection-response.md.

Exclusions overview

Updated

Updated Microsoft Defender documentation in defender-endpoint/navigate-defender-endpoint-antivirus-exclusions.md.

Exploits Malware

Updated

Updated Microsoft Defender documentation in defender-endpoint/malware/exploits-malware.md.

Fileless Threats

Updated

Updated Microsoft Defender documentation in defender-endpoint/malware/fileless-threats.md.

Get live response results

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-live-response-result.md.

Get Machineaction Object

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-machineaction-object.md.

Health Status

Updated

Updated Microsoft Defender documentation in defender-endpoint/health-status.md.

Indicator File

Updated

Updated Microsoft Defender documentation in defender-endpoint/indicator-file.md.

Linux Install Manually

Updated

Updated Microsoft Defender documentation in defender-endpoint/linux-install-manually.md.

Linux Preferences

Updated

Updated Microsoft Defender documentation in defender-endpoint/linux-preferences.md.

Macro Malware

Updated

Updated Microsoft Defender documentation in defender-endpoint/malware/macro-malware.md.

Managing Exclusions

Updated

Updated Microsoft Defender documentation in defender-endpoint/managing-exclusions.md.

Mde Linux Prerequisites

Updated

Updated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.

Mde Sec Ops Guide

Updated

Updated Microsoft Defender documentation in defender-endpoint/mde-sec-ops-guide.md.

Mtd

Updated

Updated Microsoft Defender documentation in defender-endpoint/mtd.md.

Phishing

Updated

Updated Microsoft Defender documentation in defender-endpoint/malware/phishing.md.

Phishing Trends

Updated

Updated Microsoft Defender documentation in defender-endpoint/malware/phishing-trends.md.

Prevent Malware Infection

Updated

Updated Microsoft Defender documentation in defender-endpoint/malware/prevent-malware-infection.md.

Respond File Alerts

Updated

Updated Microsoft Defender documentation in defender-endpoint/respond-file-alerts.md.

Rootkits Malware

Updated

Updated Microsoft Defender documentation in defender-endpoint/malware/rootkits-malware.md.

Safety Scanner Download

Updated

Updated Microsoft Defender documentation in defender-endpoint/safety-scanner-download.md.

Supply Chain Malware

Updated

Updated Microsoft Defender documentation in defender-endpoint/malware/supply-chain-malware.md.

Support Scams

Updated

Updated Microsoft Defender documentation in defender-endpoint/malware/support-scams.md.

Switch To Mde Phase 2

Updated

Updated Microsoft Defender documentation in defender-endpoint/switch-to-mde-phase-2.md.

Trojans Malware

Updated

Updated Microsoft Defender documentation in defender-endpoint/malware/trojans-malware.md.

Understanding Malware

Updated

Updated Microsoft Defender documentation in defender-endpoint/malware/understanding-malware.md.

Unwanted Software

Updated

Updated Microsoft Defender documentation in defender-endpoint/malware/unwanted-software.md.

Use Client Analyzer

Updated

Updated Microsoft Defender documentation in defender-endpoint/use-client-analyzer.md.

Worms Malware

Updated

Updated Microsoft Defender documentation in defender-endpoint/malware/worms-malware.md.

51

Delete Indicator API.

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/delete-ti-indicator-by-id.md.

Find devices by tag API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/find-machines-by-tag.md.

Get alerts API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/alerts.md.

Get file information API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-file-information.md.

Get file statistics API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-file-statistics.md.

Get IP statistics API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-ip-statistics.md.

Get machine by ID API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-machine-by-id.md.

Get package SAS URI API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-package-sas-uri.md.

Import Indicators API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/import-ti-indicators.md.

Isolate machine API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/isolate-machine.md.

List alerts API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-alerts.md.

List Indicators API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-ti-indicators-collection.md.

List Investigations API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-investigation-collection.md.

List machineActions API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-machineactions-collection.md.

List machines API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-machines.md.

Offboard machine API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/offboard-machine-api.md.

Run antivirus scan API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/run-av-scan.md.

Set device value API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/set-device-value.md.

Start Investigation API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/initiate-autoir-investigation.md.

Api Microsoft Flow

Updated

Updated Microsoft Defender documentation in defender-endpoint/api-microsoft-flow.md.

37

Onboard Server

Updated

Updated Microsoft Defender documentation in defender-endpoint/onboard-server.md.

33

Troubleshoot Asr

Updated

Updated Microsoft Defender documentation in defender-endpoint/troubleshoot-asr.md.

Troubleshoot Onboarding

Updated

Updated Microsoft Defender documentation in defender-endpoint/troubleshoot-onboarding.md.

20

Get exposure score

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-exposure-score.md.

Get recommendation by Id

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/get-recommendation-by-id.md.

14
5

Advanced Hunting API

Updated

Updated Microsoft Defender documentation in defender-endpoint/api/run-advanced-query-api.md.

4
1
166

Outbound delivery pools

Updated

Updated Microsoft Defender documentation in defender-office-365/outbound-spam-high-risk-delivery-pool-about.md.

Preset security policies

Updated

Updated Microsoft Defender documentation in defender-office-365/preset-security-policies.md.

Email authentication

Updated

Updated Microsoft Defender documentation in defender-office-365/email-authentication-about.md.

Scc Permissions

Updated

Updated Microsoft Defender documentation in defender-office-365/scc-permissions.md.

Pim In Mdo Configure

Updated

Updated Microsoft Defender documentation in defender-office-365/pim-in-mdo-configure.md.

Mdo Portal Permissions

Updated

Updated Microsoft Defender documentation in defender-office-365/mdo-portal-permissions.md.

Mdo Sec Ops Guide

Updated

Updated Microsoft Defender documentation in defender-office-365/mdo-sec-ops-guide.md.

Office 365 Ti

Updated

Updated Microsoft Defender documentation in defender-office-365/office-365-ti.md.

Anti-phishing protection

Updated

Updated Microsoft Defender documentation in defender-office-365/anti-phishing-protection-about.md.

Anti-spam protection

Updated

Updated Microsoft Defender documentation in defender-office-365/anti-spam-protection-about.md.

Anti-spoofing protection

Updated

Updated Microsoft Defender documentation in defender-office-365/anti-phishing-protection-spoofing-about.md.

Bulk complaint level values

Updated

Updated Microsoft Defender documentation in defender-office-365/anti-spam-bulk-complaint-level-bcl-about.md.

Bulk senders insight

Updated

Updated Microsoft Defender documentation in defender-office-365/anti-spam-bulk-senders-insight.md.

Create allowlists

Updated

Updated Microsoft Defender documentation in defender-office-365/create-safe-sender-lists-in-office-365.md.

Create blocklists

Updated

Updated Microsoft Defender documentation in defender-office-365/create-block-sender-lists-in-office-365.md.

Impersonation insight

Updated

Updated Microsoft Defender documentation in defender-office-365/anti-phishing-mdo-impersonation-insight.md.

Mail flow intelligence

Updated

Updated Microsoft Defender documentation in defender-office-365/connectors-mail-flow-intelligence.md.

Manage submissions

Updated

Updated Microsoft Defender documentation in defender-office-365/submissions-admin.md.

Mdo Ices Vendor Ecosystem

Updated

Updated Microsoft Defender documentation in defender-office-365/mdo-ices-vendor-ecosystem.md.

Outbound spam protection

Updated

Updated Microsoft Defender documentation in defender-office-365/outbound-spam-protection-about.md.

Quarantine Policies

Updated

Updated Microsoft Defender documentation in defender-office-365/quarantine-policies.md.

Safe Attachments

Updated

Updated Microsoft Defender documentation in defender-office-365/safe-attachments-about.md.

Spam confidence level

Updated

Updated Microsoft Defender documentation in defender-office-365/anti-spam-spam-confidence-level-scl-about.md.

Spoof intelligence insight

Updated

Updated Microsoft Defender documentation in defender-office-365/anti-spoofing-spoof-intelligence.md.

User reported settings

Updated

Updated Microsoft Defender documentation in defender-office-365/submissions-user-reported-messages-custom-mailbox.md.

5
3
1
1
1
4

Okta Integration

Updated

Updated Microsoft Defender documentation in defender-for-identity/okta-integration.md.

Remediation Actions

Updated

Updated Microsoft Defender documentation in defender-for-identity/remediation-actions.md.

3

Release Notes

Updated

Updated Microsoft Defender documentation in defender-for-cloud-apps/release-notes.md.

Release Notes

Updated

Updated Microsoft Defender documentation in defender-for-cloud-apps/release-notes.md.

2

Configure Permissions

Updated

Updated Microsoft Defender documentation in defender-for-iot/configure-permissions.md.

Set Up Rbac

Updated

Updated Microsoft Defender documentation in defender-for-iot/set-up-rbac.md.

3

Prerequisites

Updated

Updated Microsoft Defender documentation in exposure-management/prerequisites.md.

Whats New

Updated

Updated Microsoft Defender documentation in exposure-management/whats-new.md.

Configure Data Connectors

Updated

Updated Microsoft Defender documentation in exposure-management/configure-data-connectors.md.

30

Certificate inventory

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-certificate-inventory.md.

Event timeline

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/threat-and-vuln-mgt-event-timeline.md.

Device Restart Status

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/device-restart-status.md.

Tvm Assign Device Value

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-assign-device-value.md.

Tvm Block Vuln Apps

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-block-vuln-apps.md.

Tvm Browser Extensions

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-browser-extensions.md.

Tvm Dashboard Insights

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-dashboard-insights.md.

Tvm End Of Support Software

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-end-of-support-software.md.

Tvm Exception

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-exception.md.

Tvm Hunt Exposed Devices

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-hunt-exposed-devices.md.

Tvm Network Share Assessment

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-network-share-assessment.md.

Tvm Remediation

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-remediation.md.

Tvm Security Baselines

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-security-baselines.md.

Tvm Software Inventory

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-software-inventory.md.

Tvm Supported Os

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-supported-os.md.

Tvm Usage Insights

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-usage-insights.md.

Tvm Vulnerable Components

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-vulnerable-components.md.

Tvm Vulnerable Devices Report

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-vulnerable-devices-report.md.

Tvm Weaknesses

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-weaknesses.md.

Tvm Zero Day Vulnerabilities

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-zero-day-vulnerabilities.md.

4

Tvm Security Recommendation

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-security-recommendation.md.

Tvm Exposure Score

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-exposure-score.md.

Tvm Security Recommendation

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-security-recommendation.md.

3

Tvm Prerequisites

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-prerequisites.md.

1

Mdvm Onboard Devices

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/mdvm-onboard-devices.md.

1

Tvm Exception Overview

Updated

Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-exception-overview.md.

32

Mdb Overview

Updated

Updated Microsoft Defender documentation in defender-business/mdb-overview.md.

1
1
1
10

Playbook Managed Security

Updated

Updated Microsoft Defender documentation in unified-secops-platform/playbook-managed-security.md.

Gov Support

Updated

Updated Microsoft Defender documentation in unified-secops-platform/gov-support.md.

Mto Distribution Profiles

Updated

Updated Microsoft Defender documentation in unified-secops-platform/mto-distribution-profiles.md.

Mto Requirements

Updated

Updated Microsoft Defender documentation in unified-secops-platform/mto-requirements.md.

Mto Urbac

Updated

Updated Microsoft Defender documentation in unified-secops-platform/mto-urbac.md.

Zero Trust

Updated

Updated Microsoft Defender documentation in unified-secops-platform/zero-trust.md.

2

Deploy

Updated

Updated Microsoft Defender documentation in unified-secops-platform/overview-deploy.md.

Plan

Updated

Updated Microsoft Defender documentation in unified-secops-platform/overview-plan.md.

2

Mto Overview

Updated

Updated Microsoft Defender documentation in unified-secops-platform/mto-overview.md.

Respond Threats Overview

Updated

Updated Microsoft Defender documentation in unified-secops-platform/respond-threats-overview.md.

1
1
1
2