Whats New
UpdatedUpdated Microsoft Defender documentation in defender-xdr/whats-new.md.
Day in brief
Advanced Hunting Security Copilot leads 43 Defender updates
21 May 2026 recorded 1 new, 42 updated Microsoft Defender documentation changes. The most active areas were Endpoint, Office 365, Sentinel.
- Advanced Hunting Security Copilot
Defender XDR · Hunting and detectionUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-security-copilot.md.
- Getting the best security value from Microsoft Defender for Office 365 when you have non-Microsoft email filtering
Office 365 · Email and collaborationUpdated Microsoft Defender documentation in defender-office-365/step-by-step-guides/defense-in-depth-guide.md.
- Outbound Spam High Risk Delivery Pool AboutOffice 365 · Email and collaboration
Updated Microsoft Defender documentation in defender-office-365/outbound-spam-high-risk-delivery-pool-about.md.
- Data exploration tool collection in Microsoft Sentinel MCP server
Sentinel · Cloud and workloadsUpdated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-data-exploration-tool.md.
- Deploy Microsoft Defender for Endpoint on Linux with SaltStack
Endpoint · Architecture and deploymentUpdated Microsoft Defender documentation in defender-endpoint/linux-install-with-saltack.md.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
43 updates
Microsoft Defender XDR
2 updatesUpdated Microsoft Defender documentation in defender-xdr/advanced-hunting-security-copilot.md.
Microsoft Defender for Endpoint
18 updates
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-linux.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-windows.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-linux.md.
Indicator Ip Domain
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/indicator-ip-domain.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-linux.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-mac.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-windows.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-windows.md.
Linux Install With Ansible
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/linux-install-with-ansible.md.
Linux Install With Puppet
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/linux-install-with-puppet.md.
Linux Install With Saltack
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/linux-install-with-saltack.md.
Linux Install Manually
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/linux-install-manually.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-linux.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-mac.md.
Linux Install Manually
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/linux-install-manually.md.
Updated Microsoft Defender documentation in defender-endpoint/linux-install-with-saltack.md.
Updated Microsoft Defender documentation in defender-endpoint/linux-deploy-defender-for-endpoint-with-chef.md.
Microsoft Defender Endpoint
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint.md.
Microsoft Defender for Office 365
13 updatesUpdated Microsoft Defender documentation in defender-office-365/step-by-step-guides/defense-in-depth-guide.md.
Updated Microsoft Defender documentation in defender-office-365/outbound-spam-high-risk-delivery-pool-about.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/how-to-handle-false-negatives-in-microsoft-defender-for-office-365.md.
Updated Microsoft Defender documentation in defender-office-365/air-user-automatic-feedback-response.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/how-to-handle-false-positives-in-microsoft-defender-for-office-365.md.
Mdo Sec Ops Guide
UpdatedUpdated Microsoft Defender documentation in defender-office-365/mdo-sec-ops-guide.md.
Updated Microsoft Defender documentation in defender-office-365/submissions-admin-review-user-reported-messages.md.
Updated Microsoft Defender documentation in defender-office-365/anti-spam-spam-confidence-level-scl-about.md.
Updated Microsoft Defender documentation in defender-office-365/outbound-spam-policies-configure.md.
Updated Microsoft Defender documentation in defender-office-365/outbound-spam-protection-about.md.
Updated Microsoft Defender documentation in defender-office-365/outbound-spam-restore-restricted-users.md.
Updated Microsoft Defender documentation in defender-office-365/anti-spam-policies-troubleshooting.md.
Added Microsoft Defender documentation in defender-office-365/outbound-spam-sending-limits-troubleshoot.md.
Microsoft Sentinel
10 updatesUpdated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-data-exploration-tool.md.
Billing
UpdatedUpdated Microsoft Defender documentation in sentinel/billing.md.
Normalization About Schemas
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-about-schemas.md.
Sentinel Mcp Billing
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-billing.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-data-exploration-tool.md.
Sentinel Mcp Tools Overview
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-tools-overview.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in sentinel/whats-new.md.
Sentinel Mcp Billing
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-billing.md.
Sentinel Mcp Tools Overview
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-tools-overview.md.
Normalization Schema Asset
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-asset.md.