Updated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-inventory.md.
Day in brief
List of Microsoft Sentinel Advanced Security Information Model (ASIM) parsers | Microsoft Docs leads 172 Defender updates
2 May 2026 recorded 172 updated Microsoft Defender documentation changes. The most active areas were Sentinel, Defender XDR, Endpoint.
- List of Microsoft Sentinel Advanced Security Information Model (ASIM) parsers | Microsoft Docs
Sentinel · Cloud and workloadsUpdated Microsoft Defender documentation in sentinel/normalization-parsers-list.md.
- Microsoft Sentinel Advanced Security Information Model (ASIM) parsers overview | Microsoft DocsSentinel · Cloud and workloads
Updated Microsoft Defender documentation in sentinel/normalization-parsers-overview.md.
- Advanced Security Information Model (ASIM) helper functions | Microsoft DocsSentinel · Cloud and workloads
Updated Microsoft Defender documentation in sentinel/normalization-functions.md.
- Migrating from a non-Microsoft HIPS to attack surface reduction rules
Endpoint · Vulnerabilities and exposureUpdated Microsoft Defender documentation in defender-endpoint/migrating-asr-rules.md.
- Discover AI agents and assess security posture using Microsoft Defender (Preview)
Defender XDR · GeneralUpdated Microsoft Defender documentation in defender-xdr/security-for-ai/ai-agent-inventory.md.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
172 updates
Microsoft Defender XDR
24 updatesUpdated Microsoft Defender documentation in defender-xdr/microsoft-365-security-center-mdo.md.
Updated Microsoft Defender documentation in defender-xdr/microsoft-365-security-center-mde.md.
Updated Microsoft Defender documentation in defender-xdr/playbook-detecting-ransomware-m365-defender.md.
Updated Microsoft Defender documentation in defender-xdr/playbook-responding-ransomware-m365-defender.md.
Updated Microsoft Defender documentation in defender-xdr/shield-predict-threats-manage.md.
Updated Microsoft Defender documentation in defender-xdr/microsoft-365-defender-portal.md.
Microsoft Secure Score
UpdatedUpdated Microsoft Defender documentation in defender-xdr/microsoft-secure-score.md.
Updated Microsoft Defender documentation in defender-xdr/secure-score-data-storage-privacy.md.
Updated Microsoft Defender documentation in defender-xdr/microsoft-secure-score-history-metrics-trends.md.
Updated Microsoft Defender documentation in defender-xdr/microsoft-secure-score-improvement-actions.md.
Updated Microsoft Defender documentation in defender-xdr/microsoft-secure-score-whats-new.md.
Updated Microsoft Defender documentation in defender-xdr/shield-predict-threats.md.
Top Scoring Industry Tests
UpdatedUpdated Microsoft Defender documentation in defender-xdr/top-scoring-industry-tests.md.
Updated Microsoft Defender documentation in defender-xdr/playbook-detecting-ransomware-m365-defender.md.
Updated Microsoft Defender documentation in defender-xdr/investigate-non-human-identities.md.
Investigate Users
UpdatedUpdated Microsoft Defender documentation in defender-xdr/investigate-users.md.
Updated Microsoft Defender documentation in defender-xdr/playbook-responding-ransomware-m365-defender.md.
Updated Microsoft Defender documentation in defender-xdr/identity-security/identity-security-recommendations.md.
Updated Microsoft Defender documentation in defender-xdr/identity-security/identity-security-recommendations.md.
Updated Microsoft Defender documentation in defender-xdr/investigate-non-human-identities.md.
Investigate Identities
UpdatedUpdated Microsoft Defender documentation in defender-xdr/investigate-users.md.
Updated Microsoft Defender documentation in defender-xdr/pilot-deploy-defender-cloud-apps.md.
Updated Microsoft Defender documentation in defender-xdr/pilot-deploy-overview.md.
Microsoft Defender for Endpoint
10 updatesUpdated Microsoft Defender documentation in defender-endpoint/migrating-asr-rules.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-deployment.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-reference.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-report.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-configure.md.
Updated Microsoft Defender documentation in defender-endpoint/defender-endpoint-demonstration-attack-surface-reduction-rules.md.
Updated Microsoft Defender documentation in defender-endpoint/restrict-response-actions-high-value-assets.md.
Updated Microsoft Defender documentation in defender-endpoint/deployment-vdi-microsoft-defender-antivirus.md.
Mde P1 Setup Configuration
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/mde-p1-setup-configuration.md.
Microsoft Sentinel
138 updatesList of Microsoft Sentinel Advanced Security Information Model (ASIM) parsers | Microsoft Docs
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-parsers-list.md.
Microsoft Sentinel Advanced Security Information Model (ASIM) parsers overview | Microsoft Docs
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-parsers-overview.md.
Updated Microsoft Defender documentation in sentinel/normalization-functions.md.
Updated Microsoft Defender documentation in sentinel/normalization-known-issues.md.
Updated Microsoft Defender documentation in sentinel/normalization-about-schemas.md.
Updated Microsoft Defender documentation in sentinel/normalization-content.md.
Updated Microsoft Defender documentation in sentinel/normalization-content.md.
Updated Microsoft Defender documentation in sentinel/normalization-about-workspace-parsers.md.
Updated Microsoft Defender documentation in sentinel/normalization-about-workspace-parsers.md.
Develop Microsoft Sentinel Advanced Security Information Model (ASIM) parsers | Microsoft Docs
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-develop-parsers.md.
Updated Microsoft Defender documentation in sentinel/normalization-manage-parsers.md.
Updated Microsoft Defender documentation in sentinel/normalization-modify-content.md.
Updated Microsoft Defender documentation in sentinel/normalization.md.
Optimize security operations
UpdatedUpdated Microsoft Defender documentation in sentinel/soc-optimization/soc-optimization-access.md.
Updated Microsoft Defender documentation in sentinel/publish-sentinel-solutions.md.
Updated Microsoft Defender documentation in sentinel/normalization-entity-application.md.
Updated Microsoft Defender documentation in sentinel/normalization-entity-device.md.
Updated Microsoft Defender documentation in sentinel/normalization-entity-user.md.
Updated Microsoft Defender documentation in sentinel/normalization-entity-user.md.
Updated Microsoft Defender documentation in sentinel/normalization-about-parsers.md.
Updated Microsoft Defender documentation in sentinel/normalization-functions.md.
Updated Microsoft Defender documentation in sentinel/normalization-functions.md.
Updated Microsoft Defender documentation in sentinel/normalization-known-issues.md.
Updated Microsoft Defender documentation in sentinel/normalization-known-issues.md.
Updated Microsoft Defender documentation in sentinel/normalization-about-schemas.md.
Updated Microsoft Defender documentation in sentinel/normalization-content.md.
Develop Microsoft Sentinel Advanced Security Information Model (ASIM) parsers | Microsoft Docs
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-develop-parsers.md.
Updated Microsoft Defender documentation in sentinel/normalization-manage-parsers.md.
Updated Microsoft Defender documentation in sentinel/normalization-modify-content.md.
Updated Microsoft Defender documentation in sentinel/normalization-modify-content.md.
Updated Microsoft Defender documentation in sentinel/normalization.md.
Updated Microsoft Defender documentation in sentinel/normalization.md.
Optimize security operations
UpdatedUpdated Microsoft Defender documentation in sentinel/soc-optimization/soc-optimization-access.md.
Optimize security operations
UpdatedUpdated Microsoft Defender documentation in sentinel/soc-optimization/soc-optimization-access.md.
Updated Microsoft Defender documentation in sentinel/publish-sentinel-solutions.md.
Updated Microsoft Defender documentation in sentinel/normalization-entity-application.md.
Updated Microsoft Defender documentation in sentinel/normalization-entity-device.md.
Updated Microsoft Defender documentation in sentinel/normalization-entity-device.md.
Updated Microsoft Defender documentation in sentinel/normalization-entity-user.md.
Updated Microsoft Defender documentation in sentinel/normalization-about-parsers.md.
Updated Microsoft Defender documentation in sentinel/sentinel-analytic-rules-creation.md.
Updated Microsoft Defender documentation in sentinel/sentinel-playbook-creation.md.
Updated Microsoft Defender documentation in sentinel/sentinel-summary-rules-creation.md.
Updated Microsoft Defender documentation in sentinel/sentinel-workbook-creation.md.
Updated Microsoft Defender documentation in sentinel/normalization-ingest-time.md.
Updated Microsoft Defender documentation in sentinel/sap/solution-partner-overview.md.
Updated Microsoft Defender documentation in sentinel/normalization-entity-application.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-logserv-overview.md.
SOC optimization reference
UpdatedUpdated Microsoft Defender documentation in sentinel/soc-optimization/soc-optimization-reference.md.
Updated Microsoft Defender documentation in sentinel/sentinel-analytic-rules-creation.md.
Updated Microsoft Defender documentation in sentinel/sentinel-playbook-creation.md.
Updated Microsoft Defender documentation in sentinel/sentinel-summary-rules-creation.md.
Updated Microsoft Defender documentation in sentinel/sentinel-workbook-creation.md.
Updated Microsoft Defender documentation in sentinel/normalization-ingest-time.md.
Updated Microsoft Defender documentation in sentinel/normalization-ingest-time.md.
Updated Microsoft Defender documentation in sentinel/sap/solution-partner-overview.md.
Normalization
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization.md.
Normalization About Parsers
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-about-parsers.md.
Normalization About Schemas
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-about-schemas.md.
Updated Microsoft Defender documentation in sentinel/normalization-about-workspace-parsers.md.
Updated Microsoft Defender documentation in sentinel/normalization-about-workspace-parsers.md.
Normalization Common Fields
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-common-fields.md.
Normalization Content
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-content.md.
Updated Microsoft Defender documentation in sentinel/normalization-develop-parsers.md.
Updated Microsoft Defender documentation in sentinel/normalization-entity-application.md.
Normalization Entity Device
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-entity-device.md.
Normalization Entity User
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-entity-user.md.
Normalization Functions
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-functions.md.
Normalization Ingest Time
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-ingest-time.md.
Normalization Known Issues
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-known-issues.md.
Normalization Manage Parsers
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-manage-parsers.md.
Normalization Modify Content
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-modify-content.md.
Normalization Parsers List
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-parsers-list.md.
Updated Microsoft Defender documentation in sentinel/normalization-parsers-overview.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-logserv-overview.md.
Sap Logserv Overview
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/sap-logserv-overview.md.
Updated Microsoft Defender documentation in sentinel/sentinel-analytic-rules-creation.md.
Sentinel Playbook Creation
UpdatedUpdated Microsoft Defender documentation in sentinel/sentinel-playbook-creation.md.
SOC optimization reference
UpdatedUpdated Microsoft Defender documentation in sentinel/soc-optimization/soc-optimization-reference.md.
SOC optimization reference
UpdatedUpdated Microsoft Defender documentation in sentinel/soc-optimization/soc-optimization-reference.md.
Solution Partner Overview
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/solution-partner-overview.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-authentication.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-authentication.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-authentication.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-asset.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-audit.md.
The Advanced Security Information Model (ASIM) common schema fields reference | Microsoft Docs
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-common-fields.md.
The Advanced Security Information Model (ASIM) DNS normalization schema reference | Microsoft Docs
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-dns.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-file-event.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-network.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-process-event.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-registry-event.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-asset.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-asset.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-audit.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-audit.md.
The Advanced Security Information Model (ASIM) common schema fields reference | Microsoft Docs
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-common-fields.md.
The Advanced Security Information Model (ASIM) common schema fields reference | Microsoft Docs
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-common-fields.md.
The Advanced Security Information Model (ASIM) DNS normalization schema reference | Microsoft Docs
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-dns.md.
The Advanced Security Information Model (ASIM) DNS normalization schema reference | Microsoft Docs
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-dns.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-file-event.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-file-event.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-network.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-network.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-process-event.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-process-event.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-registry-event.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-registry-event.md.
Microsoft Sentinel network normalization schema (Legacy version - Public preview)| Microsoft Docs
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-v1.md.
Microsoft Sentinel network normalization schema (Legacy version - Public preview)| Microsoft Docs
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-v1.md.
Microsoft Sentinel network normalization schema (Legacy version - Public preview)| Microsoft Docs
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-v1.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-authentication.md.
Updated Microsoft Defender documentation in sentinel/datalake/identity-attack-graph.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-user-management.md.
Normalization Schema Web
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-web.md.
Identity Attack Graph
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/identity-attack-graph.md.
Updated Microsoft Defender documentation in sentinel/datalake/identity-attack-graph.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-user-management.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-user-management.md.
Normalization Schema Asset
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-asset.md.
Normalization Schema Audit
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-audit.md.
Normalization Schema Dns
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-dns.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-file-event.md.
Normalization Schema Network
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-network.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-process-event.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-registry-event.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-user-management.md.
Normalization Schema V1
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-v1.md.
Normalization Schema Web
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-web.md.
Normalization Schema Web
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-web.md.
Normalization Schema Web
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-web.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-alert.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-alert.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-alert.md.
Normalization Schema Alert
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-alert.md.
Updated Microsoft Defender documentation in sentinel/sentinel-hunting-rules-creation.md.
Updated Microsoft Defender documentation in sentinel/sentinel-hunting-rules-creation.md.
Updated Microsoft Defender documentation in sentinel/sentinel-hunting-rules-creation.md.