Updated Microsoft Defender documentation in defender-xdr/faq-managed-response.md.
Day in brief
Graph tool collection in Microsoft Sentinel MCP server leads 40 Defender updates
30 April 2026 recorded 1 new, 37 updated, 2 removed Microsoft Defender documentation changes. The most active areas were Sentinel, Defender XDR, Endpoint.
- Graph tool collection in Microsoft Sentinel MCP server
Sentinel · Developer and APIAdded Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-graph-tool.md.
- Advanced Hunting Graph
Defender XDR · Hunting and detectionUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-graph.md.
- Entity Tags
Identity · Identity protectionUpdated Microsoft Defender documentation in defender-for-identity/entity-tags.md.
- Restrict response actions on high-value assets (preview)
Endpoint · Endpoint protectionUpdated Microsoft Defender documentation in defender-endpoint/restrict-response-actions-high-value-assets.md.
- Investigate Anomaly Alerts
Cloud Apps · Cloud and workloadsUpdated Microsoft Defender documentation in defender-for-cloud-apps/investigate-anomaly-alerts.md.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
40 updates
Microsoft Defender XDR
8 updatesInvestigate Users
UpdatedUpdated Microsoft Defender documentation in defender-xdr/investigate-users.md.
Investigate Users
UpdatedUpdated Microsoft Defender documentation in defender-xdr/investigate-users.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-xdr/whats-new.md.
Advanced Hunting Graph
UpdatedUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-graph.md.
Hunting Graph Identity
RemovedRemoved Microsoft Defender documentation in defender-xdr/hunting-graph-identity.md.
Investigate Users
UpdatedUpdated Microsoft Defender documentation in defender-xdr/investigate-users.md.
Removed Microsoft Defender documentation in defender-xdr/faq-incident-notifications-xdr.md.
Microsoft Defender for Endpoint
7 updatesUpdated Microsoft Defender documentation in defender-endpoint/restrict-response-actions-high-value-assets.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Updated Microsoft Defender documentation in defender-endpoint/restrict-response-actions-high-value-assets.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Updated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Mde Linux Prerequisites
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-linux-prerequisites.md.
Microsoft Defender for Identity
5 updatesEntity Tags
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/entity-tags.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/install-sensor.md.
Install Sensor
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/deploy/install-sensor.md.
Investigate Domain
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/investigate-domain.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/whats-new.md.
Microsoft Defender for Cloud Apps
7 updatesInvestigate Anomaly Alerts
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/investigate-anomaly-alerts.md.
Behaviors
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/behaviors.md.
Investigate Anomaly Alerts
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/investigate-anomaly-alerts.md.
Protect Aws
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/protect-aws.md.
Protect Azure
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/protect-azure.md.
Protect Gcp
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/protect-gcp.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-monitor-apps-unusual-data-usage.md.
Microsoft Sentinel
13 updatesUpdated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-application-card.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in sentinel/whats-new.md.
Updated Microsoft Defender documentation in sentinel/connect-logstash-data-connection-rules.md.
Billing
UpdatedUpdated Microsoft Defender documentation in sentinel/billing.md.
Sentinel Mcp Billing
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-billing.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-triage-tool.md.
Sentinel Mcp Tools Overview
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-tools-overview.md.
Sentinel Mcp Triage Tool
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-triage-tool.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-application-card.md.
Updated Microsoft Defender documentation in sentinel/connect-logstash-data-connection-rules.md.
Added Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-graph-tool.md.
Updated Microsoft Defender documentation in sentinel/connect-logstash-data-connection-rules.md.
Updated Microsoft Defender documentation in sentinel/connect-logstash-data-connection-rules.md.