Updated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-detection-protection.md.
Day in brief
Planned breaking changes to ASIM KQL functions used by Microsoft Sentinel for Developers leads 50 Defender updates
15 April 2026 recorded 1 new, 48 updated Microsoft Defender documentation changes and 1 relevant Message Center announcement. The most active areas were Endpoint, Defender XDR, Cloud Apps.
- Planned breaking changes to ASIM KQL functions used by Microsoft Sentinel for Developers
Defender XDR · Hunting and detectionMicrosoft Sentinel for Developers will have planned breaking changes to ASIM KQL functions, updating _Im_ProcessCreate to use targetusername_has instead of targetusername. Organizations should review and update queries by May 25 or later to avoid disruptions. Rollout dates will be announced later.
- Predefined classifications - Microsoft Security Research
Exposure Management · Vulnerabilities and exposureUpdated Microsoft Defender documentation in exposure-management/predefined-classification-rules-and-levels.md.
- Attack Surface Reduction Rules Enable
Endpoint · Vulnerabilities and exposureUpdated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-enable.md.
- Basic setup
Cloud Apps · Identity protectionUpdated Microsoft Defender documentation in defender-for-cloud-apps/general-setup.md.
- View the Identity inventory
Identity · Identity protectionUpdated Microsoft Defender documentation in defender-for-identity/identity-inventory.md.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
50 updates
Microsoft Defender XDR
13 updatesProtect AI assets from emerging threats and vulnerabilities using Microsoft Defender (Preview)
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/defender-security-for-ai.md.
Updated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-inventory.md.
Updated Microsoft Defender documentation in defender-xdr/security-copilot-in-microsoft-365-defender.md.
Updated Microsoft Defender documentation in defender-xdr/security-copilot-in-microsoft-365-defender.md.
Ai Agent Inventory
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-inventory.md.
Updated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-detection-protection.md.
Defender Security For Ai
UpdatedUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/defender-security-for-ai.md.
Updated Microsoft Defender documentation in defender-xdr/security-for-ai/defender-security-for-ai.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-xdr/whats-new.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-xdr/whats-new.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-xdr/whats-new.md.
Microsoft Sentinel for Developers will have planned breaking changes to ASIM KQL functions, updating _Im_ProcessCreate to use targetusername_has instead of targetusername. Organizations should review and update queries by May 25 or later to avoid disruptions. Rollout dates will be announced later.
Microsoft Defender for Endpoint
15 updates
Added Microsoft Defender documentation in defender-endpoint/restrict-response-actions-high-value-assets.md.
Updated Microsoft Defender documentation in defender-endpoint/restrict-response-actions-high-value-assets.md.
Updated Microsoft Defender documentation in defender-endpoint/restrict-response-actions-high-value-assets.md.
Updated Microsoft Defender documentation in defender-endpoint/msda-updates-previous-versions-technical-upgrade-support.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Linux Off Board Endpoints
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/linux-off-board-endpoints.md.
Linux Off Board Endpoints
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/linux-off-board-endpoints.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/whats-new-in-microsoft-defender-endpoint.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-enable.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-enable.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-reference.md.
Updated Microsoft Defender documentation in defender-office-365/anti-spam-bulk-complaint-level-bcl-about.md.
Microsoft Defender for Identity
6 updatesView the Identity inventory
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/identity-inventory.md.
Health Alerts
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/health-alerts.md.
Updated Microsoft Defender documentation in defender-for-identity/health-alerts.md.
Updated Microsoft Defender documentation in defender-for-identity/manage-related-identities-accounts.md.
Us Govt Gcc High
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/us-govt-gcc-high.md.
Us Govt Gcc High
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/us-govt-gcc-high.md.
Microsoft Defender for Cloud Apps
12 updates
Activity Filters Queries
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/activity-filters-queries.md.
Activity Filters
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/activity-filters.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/cloud-discovery-aad-enrichment.md.
Manage Admins
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/manage-admins.md.
Scoped Deployment
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/scoped-deployment.md.
Proxy Intro Aad
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/proxy-intro-aad.md.
Ai Agent Protection
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/ai-agent-protection.md.
Cloud Discovery Anonymizer
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/cloud-discovery-anonymizer.md.
Basic setup
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/general-setup.md.
Accounts
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/accounts.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/control-cloud-apps-with-policies.md.
Ai Agent Protection
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/ai-agent-protection.md.
Updated Microsoft Defender documentation in exposure-management/predefined-classification-rules-and-levels.md.
Release notes
UpdatedUpdated Microsoft Defender documentation in exposure-management/whats-new.md.
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-threat-actor-naming.md.