Microsoft Defender for Cloud Apps is replacing the legacy “Activity performed by terminated user” alert with a dynamic detection model called "Activity by a deprovisioned user (preview)" starting late June 2026. This improves detection accuracy, adapts to threats, requires no manual setup, and may change alert behavior over time.
Develop Microsoft Sentinel Advanced Security Information Model (ASIM) parsers | Microsoft Docs leads 322 Defender updates
23 June 2026 recorded 19 new, 284 updated, 18 removed Microsoft Defender documentation changes and 1 relevant Message Center announcement. The most active areas were Sentinel, Cloud Apps, IoT.
- Develop Microsoft Sentinel Advanced Security Information Model (ASIM) parsers | Microsoft Docs
Sentinel · Cloud and workloads
Added Microsoft Defender documentation in sentinel/isv/normalization-develop-parsers.md.
- Migrate advanced hunting queries from Microsoft Defender for Endpoint
Defender XDR · Hunting and detection
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-migrate-from-mde.md.
- Getting the best security value from Microsoft Defender for Office 365 when you have non-Microsoft email filtering
Office 365 · Email and collaboration
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/defense-in-depth-guide.md.
- SaaS Security Posture Management (SSPM) in Microsoft Defender for Cloud Apps
Cloud Apps · Cloud and workloads
Updated Microsoft Defender documentation in defender-for-cloud-apps/posture-overview.md.
- Identity Security dashboard in Microsoft Defender for Identity (Preview)
Identity · Identity protection
Updated Microsoft Defender documentation in defender-for-identity/dashboard.md.
This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.
322 updates
Microsoft Defender XDR
20 updatesAdded Microsoft Defender documentation in defender-xdr/entity-page-threat-intelligence.md.
Updated Microsoft Defender documentation in defender-xdr/defender-threat-intelligence.md.
Entity Page Ip
UpdatedUpdated Microsoft Defender documentation in defender-xdr/entity-page-ip.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-go-hunt.md.
Updated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption-exclusions.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in defender-xdr/whats-new.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-migrate-from-mde.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-find-ransomware.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-custom-functions.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-defender-use-custom-rules.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-defender-results.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-limits.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-extend-data.md.
Updated Microsoft Defender documentation in defender-xdr/access-den-graph-api.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-link-to-incident.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-link-to-incident.md.
Automatic Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Shield Predict Threats
UpdatedUpdated Microsoft Defender documentation in defender-xdr/shield-predict-threats.md.
Automatic Attack Disruption
UpdatedUpdated Microsoft Defender documentation in defender-xdr/automatic-attack-disruption.md.
Microsoft Defender for Endpoint
1 updateUpdated Microsoft Defender documentation in defender-endpoint/defender-endpoint-demonstration-attack-surface-reduction-rules.md.
Microsoft Defender for Office 365
10 updatesUpdated Microsoft Defender documentation in defender-office-365/step-by-step-guides/defense-in-depth-guide.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/assess-the-impact-of-security-configuration-changes-with-explorer.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/tune-bulk-mail-filtering-walkthrough.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/understand-overrides-in-email-entity.md.
Updated Microsoft Defender documentation in defender-office-365/submissions-report-messages-files-to-microsoft.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/utilize-microsoft-defender-for-office-365-in-sharepoint-online.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/tune-microsoft-defender-for-office-365.md.
Updated Microsoft Defender documentation in defender-office-365/protection-stack-microsoft-defender-for-office365.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/review-allow-entries.md.
Updated Microsoft Defender documentation in defender-office-365/step-by-step-guides/reducing-attack-surface-in-microsoft-teams.md.
Microsoft Defender for Identity
27 updatesUpdated Microsoft Defender documentation in defender-for-identity/dashboard.md.
Updated Microsoft Defender documentation in defender-for-identity/connect-sail-point.md.
Updated Microsoft Defender documentation in defender-for-identity/investigate-security-alerts.md.
Migrate To Sensor V3
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/deploy/migrate-to-sensor-v3.md.
Updated Microsoft Defender documentation in defender-for-identity/alerts-xdr.md.
Updated Microsoft Defender documentation in defender-for-identity/connect-cyber-ark.md.
Updated Microsoft Defender documentation in defender-for-identity/entity-tags.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/install-sensor.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-event-collection.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-windows-event-collection.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-sensor-settings.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/create-directory-service-account-gmsa.md.
Updated Microsoft Defender documentation in defender-for-identity/configure-scoped-access.md.
Manage action accounts
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/deploy/manage-action-accounts.md.
Updated Microsoft Defender documentation in defender-for-identity/manage-related-identities-accounts.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/activate-sensor.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-proxy.md.
Updated Microsoft Defender documentation in defender-for-identity/exclusions.md.
Configure sensors for AD FS, AD CS, and Microsoft Entra Connect | Microsoft Defender for Identity
UpdatedUpdated Microsoft Defender documentation in defender-for-identity/deploy/active-directory-federation-services.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-event-forwarding.md.
Updated Microsoft Defender documentation in defender-for-identity/health-alerts.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/test-connectivity.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-port-mirroring.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/test-sensor.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/capacity-planning.md.
Updated Microsoft Defender documentation in defender-for-identity/deploy/deploy-sensor-v3.md.
Updated Microsoft Defender documentation in defender-for-identity/advanced-settings.md.
Microsoft Defender for Cloud Apps
92 updatesUpdated Microsoft Defender documentation in defender-for-cloud-apps/posture-overview.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/investigate.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/saas-security-initiative.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/ems-cloud-app-security-govt-service-byok.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/risk-score.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-egnyte.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/caac-known-issues.md.
Use Defender for Cloud Apps Conditional Access app control | Microsoft Defender for Cloud Apps
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/conditional-access-app-control-how-to-overview.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/policies-information-protection.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/log-collector-advanced-management.md.
Cloud discovery policies
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/policies-cloud-discovery.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/discovery-docker-windows.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-google-workspace.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-netdocuments.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-salesforce.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/apps-manual-onboarding-with-microsoft-entra-id.md.
Governing connected apps
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/governance-actions.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/investigate-anomaly-alerts.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-office-365.md.
Generic SIEM integration
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/siem.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-docusign.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/enable-instant-visibility-protection-and-governance-actions-for-your-apps.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/azip-integration.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/policies-threat-protection.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/control-cloud-apps-with-policies.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-workday.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/siem-sentinel.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-onelogin.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/manage-app-permissions.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-miro.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/cloud-discovery-anonymizer.md.
Configure automatic log upload using on-premises Docker on Linux | Microsoft Defender for Cloud Apps
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/discovery-docker-ubuntu.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-atlassian.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-github.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-workplace.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-citrix-sharefile.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/mde-govern.md.
Manage app governance alerts
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-manage-alerts.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-aws.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-gcp.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-mural.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/discovery-docker-ubuntu-azure.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/discovered-app-queries.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/data-protection-policies.md.
Govern discovered apps
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/governance-discovery.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/mde-integration.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-asana.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-box.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-webex.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-app-policies-get-started.md.
Investigate apps discovered by Microsoft Defender for Endpoint | Microsoft Defender for Cloud Apps
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/mde-investigation.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-investigate-predefined-policies.md.
Predefined app policies
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-predefined-policies.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-azure.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-slack.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-zendesk.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/create-snapshot-cloud-discovery-reports.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-smartsheet.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-secure-apps-app-hygiene-features.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/discovery-docker.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-app-policies-create.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/session-policy-aad.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-dropbox.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/manage-admins.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/user-activity-policies.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-permission-policy.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-okta.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-get-started.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/cloud-discovery-custom-apps.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/cloud-discovery-policies.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-visibility-insights-sensitive-content.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-visibility-insights-get-started.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/discovered-apps.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-zoom.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/in-browser-protection.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/scoped-deployment.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/dcs-inspection.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/submit-app-catalog-update-request.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-visibility-insights-view-apps.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/proxy-idp-okta.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/proxy-idp-pingone.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/proxy-idp-adfs.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/proxy-deployment-any-app-idp.md.
Identity-managed devices with Conditional Access app control | Microsoft Defender for Cloud Apps
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/conditional-access-app-control-identity.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/mail-settings.md.
Basic setup
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud-apps/general-setup.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-secure-apps-access-non-graph-api.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/discovered-apps-api-graph.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/protect-servicenow.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/attack-paths.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/behaviors.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/flow-integration.md.
Microsoft Defender for Cloud
10 updatesUpdated Microsoft Defender documentation in defender-for-cloud/review-security-recommendations.md.
Updated Microsoft Defender documentation in defender-for-cloud/agentless-vulnerability-assessment-azure.md.
Updated Microsoft Defender documentation in defender-for-cloud/alerts-sql-database-and-azure-synapse-analytics.md.
Updated Microsoft Defender documentation in defender-for-cloud/support-matrix-defender-for-containers.md.
Updated Microsoft Defender documentation in defender-for-cloud/alerts-sql-database-and-azure-synapse-analytics.md.
Updated Microsoft Defender documentation in defender-for-cloud/release-notes-recommendations-alerts.md.
Updated Microsoft Defender documentation in defender-for-cloud/release-notes-recommendations-alerts.md.
Updated Microsoft Defender documentation in defender-for-cloud/release-notes-recommendations-alerts.md.
Manage Attack Path
UpdatedUpdated Microsoft Defender documentation in defender-for-cloud/how-to-manage-attack-path.md.
Updated Microsoft Defender documentation in defender-for-cloud/support-matrix-defender-for-containers.md.
Microsoft Defender for IoT
31 updatesUpdated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-manage-subscriptions.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-manage-sensors-on-the-cloud.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-manage-cloud-alerts.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/device-builders/upgrade-micro-agent.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-control-what-traffic-is-monitored.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/legacy-central-management/manage-users-on-premises-management-console.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-work-with-threat-intelligence-packages.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/manage-users-portal.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/configure-reverse-dns-lookup.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-manage-device-inventory-for-organizations.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-create-attack-vector-reports.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-create-trends-and-statistics-reports.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/alerts.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-create-data-mining-queries.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/manage-subscriptions-enterprise.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-create-risk-assessment-reports.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-work-with-the-sensor-device-map.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/configure-sensor-settings-portal.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/connect-sensors.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/back-up-restore-sensor.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-analyze-programming-details-changes.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/detect-windows-endpoints-script.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-import-device-information.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-set-up-snmp-mib-monitoring.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-view-alerts.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/integrations/on-premises-sentinel.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-track-sensor-activity.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-investigate-sensor-detections-in-a-device-inventory.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-forward-alert-information-to-partners.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-accelerate-alert-incident-response.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/configure-windows-endpoint-monitoring.md.
Microsoft Sentinel
131 updatesAdded Microsoft Defender documentation in sentinel/isv/normalization-develop-parsers.md.
Added Microsoft Defender documentation in sentinel/isv/publish-sentinel-solutions.md.
Updated Microsoft Defender documentation in sentinel/datalake/notebooks.md.
Updated Microsoft Defender documentation in sentinel/datalake/notebook-examples.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-jobs-summary-rules-search-jobs.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-use-tool-security-copilot.md.
Updated Microsoft Defender documentation in sentinel/sap/deploy-sap-security-content.md.
Added Microsoft Defender documentation in sentinel/isv/create-push-codeless-connector.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-use-tool-copilot-studio.md.
Updated Microsoft Defender documentation in sentinel/datalake/custom-graphs-overview.md.
Updated Microsoft Defender documentation in sentinel/datalake/graph-visualization.md.
Added Microsoft Defender documentation in sentinel/isv/sentinel-analytic-rules-creation.md.
Added Microsoft Defender documentation in sentinel/isv/normalization-create-parsers-ai-agent.md.
Added Microsoft Defender documentation in sentinel/isv/sentinel-playbook-creation.md.
Added Microsoft Defender documentation in sentinel/isv/sentinel-summary-rules-creation.md.
Added Microsoft Defender documentation in sentinel/isv/sentinel-workbook-creation.md.
Added Microsoft Defender documentation in sentinel/isv/create-custom-connector-builder-agent.md.
Added Microsoft Defender documentation in sentinel/isv/partner-integrations.md.
Added Microsoft Defender documentation in sentinel/isv/package-platform-solution.md.
Added Microsoft Defender documentation in sentinel/isv/sentinel-solution-quality-guidance.md.
Updated Microsoft Defender documentation in sentinel/watchlists.md.
Added Microsoft Defender documentation in sentinel/isv/sentinel-integration-guide.md.
Required Abap Authorizations
UpdatedUpdated Microsoft Defender documentation in sentinel/sap/required-abap-authorizations.md.
Added Microsoft Defender documentation in sentinel/isv/solution-setup-essentials.md.
Updated Microsoft Defender documentation in sentinel/sap/deploy-data-connector-agent-container.md.
Added Microsoft Defender documentation in sentinel/isv/manage-platform-solutions.md.
Updated Microsoft Defender documentation in sentinel/sap/preparing-sap.md.
Updated Microsoft Defender documentation in sentinel/connect-google-cloud-platform.md.
Generate Playbook
UpdatedUpdated Microsoft Defender documentation in sentinel/automation/generate-playbook.md.
Run Playbooks
UpdatedUpdated Microsoft Defender documentation in sentinel/automation/run-playbooks.md.
Create Graphs With Ai
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/create-graphs-with-ai.md.
Create Playbooks
UpdatedUpdated Microsoft Defender documentation in sentinel/automation/create-playbooks.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-data-exploration-tool.md.
Updated Microsoft Defender documentation in sentinel/datalake/data-federation-setup.md.
Work With Threat Indicators
UpdatedUpdated Microsoft Defender documentation in sentinel/work-with-threat-indicators.md.
Updated Microsoft Defender documentation in sentinel/connect-microsoft-365-defender.md.
Updated Microsoft Defender documentation in sentinel/sap/deployment-solution-configuration.md.
Using Data Federation
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/using-data-federation.md.
Updated Microsoft Defender documentation in sentinel/connect-custom-logs-ama.md.
Connect Dns Ama
UpdatedUpdated Microsoft Defender documentation in sentinel/connect-dns-ama.md.
Updated Microsoft Defender documentation in sentinel/datalake/notebook-jobs.md.
Updated Microsoft Defender documentation in sentinel/connect-azure-functions-template.md.
Updated Microsoft Defender documentation in sentinel/sap/collect-sap-hana-audit-logs.md.
Updated Microsoft Defender documentation in sentinel/business-applications/deploy-power-platform-solution.md.
Updated Microsoft Defender documentation in sentinel/connect-defender-for-cloud.md.
Updated Microsoft Defender documentation in sentinel/connect-cef-syslog-ama.md.
Soc Optimization Access
UpdatedUpdated Microsoft Defender documentation in sentinel/soc-optimization/soc-optimization-access.md.
Updated Microsoft Defender documentation in sentinel/automation/authenticate-playbooks-to-sentinel.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-agent-creation-tool.md.
Sentinel Mcp Logic Apps
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-logic-apps.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-use-tool-azure-ai-foundry.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-triage-tool.md.
Connect Microsoft Purview
UpdatedUpdated Microsoft Defender documentation in sentinel/connect-microsoft-purview.md.
Updated Microsoft Defender documentation in sentinel/datalake/workbooks-for-data-lake.md.
Updated Microsoft Defender documentation in sentinel/automation/use-playbook-templates.md.
Updated Microsoft Defender documentation in sentinel/work-with-anomaly-rules.md.
Updated Microsoft Defender documentation in sentinel/connect-azure-virtual-desktop.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-lake-connectors.md.
Updated Microsoft Defender documentation in sentinel/datalake/create-custom-graphs.md.
Updated Microsoft Defender documentation in sentinel/sap/stop-collection.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in sentinel/whats-new.md.
Updated Microsoft Defender documentation in sentinel/automation/automate-responses-with-playbooks.md.
Updated Microsoft Defender documentation in sentinel/automation/define-playbook-access-restrictions.md.
Updated Microsoft Defender documentation in sentinel/data-connection-rules-reference-azure-storage.md.
Updated Microsoft Defender documentation in sentinel/data-connection-rules-reference-gcp.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-use-tool-visual-studio-code.md.
Whats New
UpdatedUpdated Microsoft Defender documentation in sentinel/whats-new.md.
Normalization Functions
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-functions.md.
Normalization Manage Parsers
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-manage-parsers.md.
Updated Microsoft Defender documentation in sentinel/normalization-parsers-overview.md.
Sentinel Overview
UpdatedUpdated Microsoft Defender documentation in sentinel/sentinel-overview.md.
Best Practices
UpdatedUpdated Microsoft Defender documentation in sentinel/best-practices.md.
Connect Data Sources
UpdatedUpdated Microsoft Defender documentation in sentinel/connect-data-sources.md.
Updated Microsoft Defender documentation in sentinel/connect-google-cloud-platform.md.
Data Transformation
UpdatedUpdated Microsoft Defender documentation in sentinel/data-transformation.md.
Feature Availability
UpdatedUpdated Microsoft Defender documentation in sentinel/feature-availability.md.
Normalization
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization.md.
Normalization About Parsers
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-about-parsers.md.
Updated Microsoft Defender documentation in sentinel/normalization-about-workspace-parsers.md.
Normalization Ingest Time
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-ingest-time.md.
Normalization Parsers List
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-parsers-list.md.
Manage Platform Solutions
RemovedRemoved Microsoft Defender documentation in sentinel/manage-platform-solutions.md.
Removed Microsoft Defender documentation in sentinel/normalization-create-parsers-ai-agent.md.
Removed Microsoft Defender documentation in sentinel/normalization-develop-parsers.md.
Package Platform Solution
RemovedRemoved Microsoft Defender documentation in sentinel/package-platform-solution.md.
Partner Integrations
RemovedRemoved Microsoft Defender documentation in sentinel/partner-integrations.md.
Publish Sentinel Solutions
RemovedRemoved Microsoft Defender documentation in sentinel/publish-sentinel-solutions.md.
Removed Microsoft Defender documentation in sentinel/sentinel-analytic-rules-creation.md.
Sentinel Integration Guide
RemovedRemoved Microsoft Defender documentation in sentinel/sentinel-integration-guide.md.
Sentinel Playbook Creation
RemovedRemoved Microsoft Defender documentation in sentinel/sentinel-playbook-creation.md.
Removed Microsoft Defender documentation in sentinel/sentinel-solution-quality-guidance.md.
Removed Microsoft Defender documentation in sentinel/sentinel-summary-rules-creation.md.
Sentinel Workbook Creation
RemovedRemoved Microsoft Defender documentation in sentinel/sentinel-workbook-creation.md.
Solution Setup Essentials
RemovedRemoved Microsoft Defender documentation in sentinel/solution-setup-essentials.md.
Added Microsoft Defender documentation in sentinel/isv/create-codeless-connector.md.
Updated Microsoft Defender documentation in sentinel/sap/sap-solution-deploy-alternate.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-lake-onboarding.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-mcp-chatgpt-claude-connector.md.
Updated Microsoft Defender documentation in sentinel/sap/deploy-command-line.md.
Updated Microsoft Defender documentation in sentinel/sap/update-sap-data-connector.md.
Updated Microsoft Defender documentation in sentinel/datalake/auditing-lake-activities.md.
Updated Microsoft Defender documentation in sentinel/data-connector-connection-rules-reference.md.
Create Custom Connector
UpdatedUpdated Microsoft Defender documentation in sentinel/create-custom-connector.md.
Updated Microsoft Defender documentation in sentinel/setup-azure-storage-connector.md.
Updated Microsoft Defender documentation in sentinel/data-connector-ui-definitions-reference.md.
Updated Microsoft Defender documentation in sentinel/monitor-data-connector-health.md.
Normalization Schema Asset
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-asset.md.
Normalization Schema Network
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-network.md.
Create Codeless Connector
RemovedRemoved Microsoft Defender documentation in sentinel/create-codeless-connector.md.
Removed Microsoft Defender documentation in sentinel/create-custom-connector-builder-agent.md.
Removed Microsoft Defender documentation in sentinel/create-push-codeless-connector.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-jobs.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-troubleshoot.md.
Updated Microsoft Defender documentation in sentinel/work-with-stix-objects-indicators.md.
Added Microsoft Defender documentation in sentinel/isv/sentinel-hunting-rules-creation.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-queries.md.
Updated Microsoft Defender documentation in sentinel/datalake/kql-queries-api.md.
Kql Sample Queries
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/kql-sample-queries.md.
Removed Microsoft Defender documentation in sentinel/sentinel-hunting-rules-creation.md.
Updated Microsoft Defender documentation in sentinel/dynamics-365/deploy-dynamics-365-finance-operations-solution.md.
Updated Microsoft Defender documentation in sentinel/sap/deploy-sap-btp-solution.md.
Updated Microsoft Defender documentation in sentinel/datalake/sentinel-lake-onboard-defender.md.
Updated Microsoft Defender documentation in sentinel/connect-azure-stack.md.
Updated Microsoft Defender documentation in sentinel/automation/migrate-playbooks-to-automation-rules.md.
Updated Microsoft Defender documentation in sentinel/automation/create-tasks-playbook.md.
Updated Microsoft Defender documentation in sentinel/work-with-tasks.md.
Normalization Schema Alert
UpdatedUpdated Microsoft Defender documentation in sentinel/normalization-schema-alert.md.
Added Microsoft Defender documentation in sentinel/isv/troubleshoot-sentinel-solutions.md.
Troubleshoot Sentinel Mcp
UpdatedUpdated Microsoft Defender documentation in sentinel/datalake/troubleshoot-sentinel-mcp.md.
Updated Microsoft Defender documentation in sentinel/azure-storage-blob-connector-troubleshoot.md.
Removed Microsoft Defender documentation in sentinel/troubleshoot-sentinel-solutions.md.
