← Previous day

Next day →
Day in brief

OT threat monitoring in enterprise security operation center (SOC) teams - Microsoft Defender for IoT leads 250 Defender updates

27 April 2026 recorded 182 new, 64 updated, 2 removed Microsoft Defender documentation changes and 2 relevant Message Center announcements. The most active areas were IoT, Endpoint, Defender XDR.

This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.

250 updates

13
9

Defender Rai Faq

Updated

Updated Microsoft Defender documentation in defender-xdr/defender-rai-faq.md.

Defender Rai Faq

Updated

Updated Microsoft Defender documentation in defender-xdr/defender-rai-faq.md.

Manage Rbac

Updated

Updated Microsoft Defender documentation in defender-xdr/manage-rbac.md.

Manage Rbac

Updated

Updated Microsoft Defender documentation in defender-xdr/manage-rbac.md.

Defender Rai Faq

Removed

Removed Microsoft Defender documentation in defender-xdr/defender-rai-faq.md.

1
1
21

Respond Machine Alerts

Updated

Updated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.

Controlled Folders

Updated

Updated Microsoft Defender documentation in defender-endpoint/controlled-folders.md.

Exploit Protection

Updated

Updated Microsoft Defender documentation in defender-endpoint/exploit-protection.md.

Network Protection

Updated

Updated Microsoft Defender documentation in defender-endpoint/network-protection.md.

7

Monitor ASR rule activity

Updated

Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-monitor.md.

1
1
3

Quarantine End User

Updated

Updated Microsoft Defender documentation in defender-office-365/quarantine-end-user.md.

2

Health Alerts

Updated

Updated Microsoft Defender documentation in defender-for-identity/health-alerts.md.

1

Accounts

Updated

Updated Microsoft Defender documentation in defender-for-identity/security-posture-assessments/accounts.md.

121

Investigate security alerts

New

Added Microsoft Defender documentation in defender-for-iot-azure/device-builders/tutorial-investigate-security-alerts.md.

Micro agent security alerts

New

Added Microsoft Defender documentation in defender-for-iot-azure/device-builders/concept-agent-based-security-alerts.md.

Feature support and retirement

New

Added Microsoft Defender documentation in defender-for-iot-azure/device-builders/edge-security-module-deprecation.md.

Configure a micro agent twin

New

Added Microsoft Defender documentation in defender-for-iot-azure/device-builders/how-to-configure-micro-agent-twin.md.

Micro agent configurations

New

Added Microsoft Defender documentation in defender-for-iot-azure/device-builders/concept-micro-agent-configuration.md.

Micro agent event collection

New

Added Microsoft Defender documentation in defender-for-iot-azure/device-builders/concept-event-aggregation.md.

Create attack vector reports

New

Added Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-create-attack-vector-reports.md.

Create custom alerts

New

Added Microsoft Defender documentation in defender-for-iot-azure/device-builders/quickstart-create-custom-alerts.md.

Work with Defender for IoT APIs

New

Added Microsoft Defender documentation in defender-for-iot-azure/organizations/references-work-with-defender-for-iot-apis.md.

Micro agent Linux dependencies

New

Added Microsoft Defender documentation in defender-for-iot-azure/device-builders/concept-micro-agent-linux-dependencies.md.

Release Notes

Updated

Updated Microsoft Defender documentation in defender-for-iot-azure/device-builders/release-notes.md.

Index

Removed

Removed Microsoft Defender documentation in defender-for-iot-azure/index.md.

34

Install OT sensor software

New

Added Microsoft Defender documentation in defender-for-iot-azure/organizations/ot-deploy/install-software-ot-sensor.md.

7

Standalone micro agent overview

New

Added Microsoft Defender documentation in defender-for-iot-azure/device-builders/concept-standalone-micro-agent-overview.md.

6
5
4
3
1
6

Notebook Jobs

Updated

Updated Microsoft Defender documentation in sentinel/datalake/notebook-jobs.md.

Notebooks

Updated

Updated Microsoft Defender documentation in sentinel/datalake/notebooks.md.

Notebook Jobs

Updated

Updated Microsoft Defender documentation in sentinel/datalake/notebook-jobs.md.

Scoping

Updated

Updated Microsoft Defender documentation in sentinel/scoping.md.

1
2

Governance Relationships

Updated

Updated Microsoft Defender documentation in unified-secops-platform/governance-relationships.md.

Governance Relationships

Updated

Updated Microsoft Defender documentation in unified-secops-platform/governance-relationships.md.