Updated Microsoft Defender documentation in defender-xdr/threat-intel-briefing-agent-defender.md.
Microsoft Security Copilot Threat Hunting Agent in advanced hunting (preview) leads 123 Defender updates
19 June 2026 recorded 123 updated Microsoft Defender documentation changes. The most active areas were Endpoint, Defender XDR.
- Microsoft Security Copilot Threat Hunting Agent in advanced hunting (preview)
Defender XDR · Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-security-copilot-threat-hunting-agent.md.
- Microsoft Security Copilot advanced hunting query assistant
Defender XDR · Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-security-copilot-query-assistant.md.
- Microsoft Security Copilot in advanced hunting
Defender XDR · Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-security-copilot.md.
- Protect macOS security settings with tamper protection
Endpoint · Endpoint protection
Updated Microsoft Defender documentation in defender-endpoint/tamperprotection-macos.md.
- Security Copilot Threat Intelligence Briefing Agent in Microsoft Defender
Defender XDR · General
Updated Microsoft Defender documentation in defender-xdr/threat-intel-briefing-agent-defender.md.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
123 updates
Microsoft Defender XDR
35 updatesUpdated Microsoft Defender documentation in defender-xdr/security-analyst-agent.md.
Updated Microsoft Defender documentation in defender-xdr/shield-predict-threats-manage.md.
Updated Microsoft Defender documentation in defender-xdr/okta-attack-disruption.md.
Updated Microsoft Defender documentation in defender-xdr/threat-analytics-indicators.md.
Updated Microsoft Defender documentation in defender-xdr/experts-on-demand.md.
Updated Microsoft Defender documentation in defender-xdr/scoping.md.
Manage Incidents
UpdatedUpdated Microsoft Defender documentation in defender-xdr/manage-incidents.md.
Updated Microsoft Defender documentation in defender-xdr/dlp-investigate-alerts-defender.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-query-builder-details.md.
Updated Microsoft Defender documentation in defender-xdr/create-custom-rbac-roles.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-query-history.md.
Updated Microsoft Defender documentation in defender-xdr/auditing.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-query-emails-devices.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-modes.md.
Updated Microsoft Defender documentation in defender-xdr/exclude-analytics-rules-correlation.md.
Updated Microsoft Defender documentation in defender-xdr/start-using-mdex-xdr.md.
Activate Defender Rbac
UpdatedUpdated Microsoft Defender documentation in defender-xdr/activate-defender-rbac.md.
Updated Microsoft Defender documentation in defender-xdr/m365d-threat-analytics-notifications.md.
Updated Microsoft Defender documentation in defender-xdr/dlp-investigate-alerts-sentinel.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-query-builder-results.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-security-copilot-threat-hunting-agent.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-security-copilot-query-assistant.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-security-copilot.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-query-builder.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-shared-queries.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-query-language.md.
Updated Microsoft Defender documentation in defender-xdr/custom-detection-manage.md.
Updated Microsoft Defender documentation in defender-xdr/onboarding-defender-experts-for-hunting.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-query-results.md.
Updated Microsoft Defender documentation in defender-xdr/before-you-begin-defender-experts.md.
Custom Detection Rules
UpdatedUpdated Microsoft Defender documentation in defender-xdr/custom-detection-rules.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-take-action.md.
Updated Microsoft Defender documentation in defender-xdr/defender-xdr-custom-reports.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Microsoft Defender for Endpoint
88 updatesUpdated Microsoft Defender documentation in defender-endpoint/tamperprotection-macos.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-security-center-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-antivirus-compatibility.md.
Updated Microsoft Defender documentation in defender-endpoint/prevent-changes-to-security-settings-with-tamper-protection.md.
Updated Microsoft Defender documentation in defender-endpoint/evaluate-mda-using-mde-security-settings-management.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-machines-security-baseline.md.
Updated Microsoft Defender documentation in defender-endpoint/migrating-mde-server-to-cloud.md.
Microsoft Defender for Endpoint streamlined connectivity URLs - US government environments (Preview)
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/streamlined-device-connectivity-urls-gov.md.
Updated Microsoft Defender documentation in defender-endpoint/deployment-vdi-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/evaluate-mdav-using-gp.md.
Updated Microsoft Defender documentation in defender-endpoint/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md.
Enable exploit protection
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/enable-exploit-protection.md.
Updated Microsoft Defender documentation in defender-endpoint/review-detected-threats.md.
Investigate domains and URLs
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/investigate-domain.md.
Create indicators for files
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/indicator-file.md.
Updated Microsoft Defender documentation in defender-endpoint/edr-detection.md.
Updated Microsoft Defender documentation in defender-endpoint/sandbox-mdav.md.
Updated Microsoft Defender documentation in defender-endpoint/schedule-antivirus-scans-group-policy.md.
Turn on block at first sight
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/configure-block-at-first-sight-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-extension-file-exclusions-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/tune-performance-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/guidance-for-pen-testing-and-bas.md.
Updated Microsoft Defender documentation in defender-endpoint/mde-demonstration-amsi.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-notifications-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/live-response.md.
Updated Microsoft Defender documentation in defender-endpoint/manage-outdated-endpoints-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/use-intune-config-manager-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/respond-machine-alerts.md.
Updated Microsoft Defender documentation in defender-endpoint/defender-endpoint-trial-user-guide.md.
Updated Microsoft Defender documentation in defender-endpoint/manage-event-based-updates-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-antivirus-performance-mode.md.
Updated Microsoft Defender documentation in defender-endpoint/schedule-antivirus-scans-intune.md.
Updated Microsoft Defender documentation in defender-endpoint/web-protection-overview.md.
Updated Microsoft Defender documentation in defender-endpoint/investigate-user.md.
Updated Microsoft Defender documentation in defender-endpoint/manage-updates-mobile-devices-vms-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/standard-device-connectivity-urls-commercial.md.
Updated Microsoft Defender documentation in defender-endpoint/manage-auto-investigation.md.
Updated Microsoft Defender documentation in defender-endpoint/respond-file-alerts.md.
Updated Microsoft Defender documentation in defender-endpoint/run-scan-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-process-opened-file-exclusions-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/web-content-filtering.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-releases.md.
Updated Microsoft Defender documentation in defender-endpoint/enable-cloud-protection-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/schedule-antivirus-scans.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-wdac-script-enforcement-mde.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-real-time-protection-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/schedule-antivirus-scans-wmi.md.
Updated Microsoft Defender documentation in defender-endpoint/manage-tamper-protection-intune.md.
Updated Microsoft Defender documentation in defender-endpoint/manage-protection-updates-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/run-analyzer-windows.md.
Updated Microsoft Defender documentation in defender-endpoint/manage-protection-update-schedule-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/restore-quarantined-files-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/assess-devices.md.
Updated Microsoft Defender documentation in defender-endpoint/navigate-defender-endpoint-antivirus-exclusions.md.
Updated Microsoft Defender documentation in defender-endpoint/review-scan-results-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/use-group-policy-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-advanced-scan-types-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/limited-periodic-scanning-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/defender-endpoint-demonstration-exploit-protection.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-remediation-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-cloud-block-timeout-period-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/indicator-certificates.md.
Updated Microsoft Defender documentation in defender-endpoint/enable-update-mdav-to-latest-ws.md.
Updated Microsoft Defender documentation in defender-endpoint/investigate-behind-proxy.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-offline.md.
Use Windows Management Instrumentation (WMI) to configure and manage Microsoft Defender Antivirus
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/use-wmi-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/manage-profiles-approve-sys-extensions-intune.md.
Updated Microsoft Defender documentation in defender-endpoint/configure-exclusions-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/find-defender-malware-name.md.
Updated Microsoft Defender documentation in defender-endpoint/event-error-codes.md.
Updated Microsoft Defender documentation in defender-endpoint/specify-cloud-protection-level-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/device-health-reports.md.
Exploit protection reference
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/exploit-protection-reference.md.
Updated Microsoft Defender documentation in defender-endpoint/collect-diagnostic-data.md.
Evaluate exploit protection
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/evaluate-exploit-protection.md.
Android Configure
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/android-configure.md.
Android Configure Mam
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/android-configure-mam.md.
Ios Configure Features
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/ios-configure-features.md.
Updated Microsoft Defender documentation in defender-endpoint/schedule-antivirus-scans-powershell.md.
Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-antivirus-using-powershell.md.
Updated Microsoft Defender documentation in defender-endpoint/use-powershell-cmdlets-microsoft-defender-antivirus.md.
Updated Microsoft Defender documentation in defender-endpoint/defender-endpoint-demonstration-attack-surface-reduction-rules.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-windows-events.md.
Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-configure.md.
Updated Microsoft Defender documentation in defender-endpoint/investigate-ip.md.
Updated Microsoft Defender documentation in defender-endpoint/information-protection-investigation.md.
Updated Microsoft Defender documentation in defender-endpoint/troubleshoot-np.md.
Troubleshoot Asr
UpdatedUpdated Microsoft Defender documentation in defender-endpoint/troubleshoot-asr.md.
