← Previous day

Next day →
Day in brief

Azure posture policies and exemptions preview as Teams call hunting arrives

The day’s meaningful changes are concentrated in two product developments: public-preview posture controls for Azure environments and a November 2026 Defender XDR capability for investigating suspicious Teams calls and meetings. Sentinel guidance also gained targeted SAP ingestion-health queries. With 1,248 updates and no new or removed pages, the remaining supplied changes are predominantly metadata and reference-link maintenance.

  • Exposure Management · Vulnerabilities and exposure
    Azure posture policies and recommendation exemptions enter public preview

    Exposure Management guidance says administrators can evaluate Azure resources against the Microsoft Defender for Cloud baseline, create custom posture policies, and centrally manage accepted-risk exemptions with lifecycle tracking. The controls are available in public preview for Azure environments.

  • Microsoft Defender XDR will provide the CallActivityEvents table for Defender for Office 365 Plan 2 teams to investigate suspicious Microsoft Teams calls and meetings, including activities, initiators, organizers, and related messages. The capability is scheduled for worldwide availability from November 2026 and integrates with advanced hunting, the event streaming API, and Microsoft Sentinel.

  • The SAP system health article now links to KQL queries for detecting incomplete collection windows and truncation markers, and for analyzing daily and projected monthly volume, hourly peaks, and high-volume accounts. These queries support investigation of ingestion completeness and volume patterns.

This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.

1249 updates

99

Microsoft 365 Security Center Mdo

Doc update

Two authoring-service links were replaced with Microsoft DevRel offering-ontology links; existing ontology references were retained.

Security Analyst Agent

Doc update

Two authoring-document links were replaced in the Security Analyst Agent page.

Mto Tenant Groups

Doc update

The tenant groups page now includes six product metadata references grouped under cmProducts and spProducts.

Mto Workbooks

Doc update

The page now includes product-reference metadata under cmProducts and spProducts.

Edit Delete Rbac Roles

Doc update

Four DevRel and DevRel Offering Ontology reference links were added to the documentation page.

Entity Page Ip

Doc update

The page retains its existing authoring references and adds two Microsoft DevRel ontology links.

M365d Permissions

Doc update

Several DevRel and ontology reference URLs on the page were replaced or updated.

Phishing Triage Agent

Doc update

The page’s associated DevRel and authoring-system reference URLs were replaced with updated links.

Scoping

Doc update

The scoping page now includes four additional DevRel reference links.

Siem Defender Workbooks

Doc update

The Defender workbooks documentation page now includes four additional DevRel ontology and authoring references.

Ai Agent Real Time Protection

Doc update

The documentation page’s linked DevRel offering ontology references were updated, removing four links and adding two replacement links.

Case Sla Policies

Doc update

The Case SLA policies page now includes two DevRel Offering Ontology links.

Configure Asset Rules

Doc update

The Configure asset rules article now includes two Microsoft DevRel Offering Ontology links.

Configure Event Hub

Doc update

The event hub configuration page now includes two DevRel Offering Ontology links.

Configure Siem Defender

Doc update

Two authoring metadata links were rewritten with the same URLs; the documented configuration guidance is unchanged.

Content Hub Defender

Doc update

The Defender XDR content hub page now links to two Microsoft DevRel Offering Ontology entries.

Create Custom Rbac Roles

Doc update

Two authoring-documentation links were replaced with two different links in the custom RBAC roles article.

Create Dsi In Defender

Doc update

Two DevRel metadata references on the Defender XDR page were updated; their displayed destination URLs remain unchanged.

Custom Roles

Doc update

The custom roles page now includes two additional links.

Defender Experts Mdr Considerations

Doc update

Two Microsoft DevRel ontology links were removed from the documentation while the corresponding authoring-document links were retained.

Fetch Incidents

Doc update

The page’s two ontology references were replaced with new authoring-docs Microsoft URLs.

Investigate Incidents

Doc update

The investigation incidents documentation now uses two Microsoft DevRel Offering Ontology URLs instead of the previous authoring-docs links.

Investigate Users

Doc update

Two internal authoring-reference URLs in the Defender XDR user investigation page were changed.

M365d Autoir Actions

Doc update

Two DevRelOfferingOntology references were rewritten with the same URLs as before.

M365d Enable

Doc update

The page now includes two additional DevRel Offering Ontology links.

Manage Incidents

Doc update

The incident management documentation now includes two additional authoring-docs links.

Microsoft 365 Defender

Doc update

Two internal ontology links were replaced with updated Microsoft DevRel ontology URLs.

Mssp Access

Doc update

Several internal DevRel and authoring-documentation links were replaced in the MSSP access page.

Mto Cross Cloud

Doc update

The page’s DevRel ontology links were replaced with updated authoring-docs-microsoft.poolparty.biz references.

Mto Distribution Profiles

Doc update

The distribution profiles page now uses two updated ontology URLs under the authoring-docs domain.

Mto Tenants

Doc update

The page now includes two additional Microsoft DevRel Offering Ontology links.

Mto Urbac

Doc update

The mto-urbac page now includes two additional DevRelOfferingOntology links.

Query Threat Intelligence

Doc update

The page’s two DevRel ontology references were refreshed in the documentation diff; their URLs remain the same.

Threat Analytics

Doc update

The threat analytics page’s DevRel and ontology reference links were changed.

Usgov

Doc update

Two ontology-link entries in the US government documentation were updated, but the URLs remain unchanged.

Virus Initiative Criteria

Doc update

Two authoring-reference link entries were refreshed; the linked URLs and documented criteria remain unchanged.

Whats New

Doc update

The Defender XDR What's new page now includes two additional links to Microsoft DevRel Offering Ontology entries.

Contact Defender Support

Doc update

The contact Defender support page no longer includes four DevRel and authoring-system links.

Shield Predict Threats

Doc update

The Shield Predict Threats documentation removed four internal ontology and authoring links.

80

Microsoft Defender XDR: Investigate suspicious Microsoft Teams calls and meetings with advanced hunting

New

Microsoft Defender XDR's CallActivityEvents table enables security teams with Defender for Office 365 Plan 2 to investigate suspicious Microsoft Teams calls and meetings by analyzing activities, initiators, organizers, and related messages. Available worldwide from November 2026, it integrates with advanced hunting, event streaming API, and Microsoft Sentinel for enhanced threat detection.

Message CenterMC1532241 on mc.merill.net ↗Stay informed

Hunting Overview

Doc update

The page now includes references to associated products in its `cmProducts` and `spProducts` metadata fields.

Advanced Hunting Deviceevents Table

Doc update

The page’s reference metadata now includes two authoring-document links and removes two previous ontology links; two existing ontology links remain.

Advanced Hunting Query Language

Doc update

Two DevRel Offering Ontology links in the advanced hunting query language article were changed to new identifiers.

Advanced Hunting Query Results

Doc update

Two authoring-reference entries on the advanced hunting query results page were refreshed; the URLs remain unchanged.

Advanced Hunting Shared Queries

Doc update

The shared queries documentation was updated at two authoring reference entries; the displayed URLs remain unchanged.

Custom Detection Rules

Doc update

The article’s two reference entries were refreshed; the displayed URLs remain unchanged.

Defender Experts Hunting Onboarding

Doc update

The Defender Experts hunting onboarding document removes two internal authoring references. No other content was added or changed in this diff.

16

Api Get Incident

Doc update

Two Microsoft DevRel ontology URLs were removed from the article metadata, while the authoring-documentation URLs were retained.

Plan Incident Response

Doc update

The article now includes two additional Microsoft DevRel Offering Ontology links.

8

Get Started Defender Security For Ai

Doc update

The page’s DevRel ontology references were replaced with different Microsoft ontology links, and two authoring-documentation links were removed.

Mto Overview

Doc update

Two links now point to microsoft-devrel.poolparty.biz instead of authoring-docs-microsoft.poolparty.biz; the other two links are unchanged.

Incidents Overview

Doc update

The Defender XDR incidents overview page now includes two additional Microsoft DevRel Offering Ontology links.

Isoc Overview

Doc update

Two ontology reference URLs in the Defender XDR ISOC overview were replaced with new Microsoft DevRel destinations.

Custom Detections Overview

Doc update

The custom detections overview documentation no longer includes four internal DevRel reference links.

7

Pilot Deploy Defender Cloud Apps

Doc update

Two ontology references were changed from microsoft-devrel.poolparty.biz URLs to authoring-docs-microsoft.poolparty.biz URLs.

Pilot Deploy Overview

Doc update

Two DevRel offering ontology link entries were edited, while the displayed URLs remain unchanged.

Deploy Supported Services

Doc update

The supported services documentation no longer includes two DevRel Offering Ontology links.

Pilot Deploy Defender Endpoint

Doc update

The Defender for Endpoint pilot deployment page no longer includes four DevRel Offering Ontology URL references.

Pilot Deploy Defender Office 365

Doc update

The Defender for Office 365 pilot deployment page removed four internal DevRel reference URLs. No other content changes are shown.

5

Api Create App Web

Doc update

The page now includes updated authoring and DevRel ontology references.

Api Access

Doc update

Two authoring-documentation links in the Defender XDR API access page were replaced with updated references.

Api Hello World

Doc update

Two DevRel ontology references now point to updated authoring-docs endpoints.

Api Partner Access

Doc update

The API partner access page now references different internal DevRel metadata records.

4

Coverage Maturity

Doc update

Two links were updated to new Microsoft authoring-documentation URLs.

1
1

Mto Endpoint Security Policy

Doc update

Four DevRel Offering Ontology links were replaced with four updated links on the endpoint security policy page.

1

Api Error Codes

Doc update

Two reference-link lines were updated; the visible URLs remain unchanged in the supplied diff.

252

Migrating Mde Server To Cloud

Doc update

Two metadata references were replaced with Microsoft DevRel Offering Ontology links, while two existing authoring references remain.

Migrate Devices Streamlined

Doc update

Removed two Microsoft DevRel ontology links while retaining the corresponding authoring-docs references.

Server Migration

Doc update

Two DevRel Offering Ontology links in the server migration page were replaced with new references.

Switch To Mde Phase 3

Doc update

Two DevRel Offering Ontology links on the Phase 3 migration page were refreshed; their URLs remain unchanged.

Configure Conditional Access

Doc update

Two ontology links were replaced with corresponding authoring-docs.microsoft.com references; the other links remain unchanged.

Conditional Access

Doc update

The page’s underlying DevRel/PoolParty reference links were replaced with new links.

Device Control Configure

Doc update

The page now includes additional product associations under the cmProducts and spProducts metadata fields.

Advanced Features

Doc update

The Defender advanced features page now uses updated DevRel/PoolParty authoring reference links.

Android Configure

Doc update

The Android configuration page now uses revised DevRel ontology links in its metadata.

Azure Server Integration

Doc update

The page now uses updated Microsoft DevRel ontology URLs for two references; the other listed references are unchanged.

Basic Permissions

Doc update

The basic permissions page now points to updated DevRel and authoring metadata references.

Behavior Monitor Macos

Doc update

Four DevRel Offering Ontology links were added to the Defender for Endpoint macOS behavior monitoring page.

Configure Endpoints Mdm

Doc update

The page’s internal documentation references were replaced with updated DevRel ontology links.

Configure Endpoints Vdi

Doc update

Four internal DevRel ontology links were replaced with updated microsoft-devrel URLs.

Configure Updates

Doc update

Two existing authoring-document links now include corresponding microsoft-devrel.poolparty.biz ontology references.

Enable Network Protection

Doc update

The page’s associated metadata links were refreshed: two authoring-document links were replaced with two ontology links, while two existing ontology links remain.

Get Assessment Methods Properties

Doc update

Two pairs of internal authoring and DevRel ontology links were replaced with new references on the assessment methods properties page.

Grant Mssp Access

Doc update

The page now includes two authoring-documentation taxonomy links alongside the existing DevRel ontology links.

Investigate Domain

Doc update

The article metadata now includes two additional authoring-docs references while retaining the existing DevRel ontology links.

Investigate Files

Doc update

The page’s linked ontology references were updated, including new authoring-docs links and replacement Microsoft DevRel ontology links.

Machine Groups

Doc update

The page now includes two authoring-docs ontology links alongside the existing DevRel ontology links.

Machines View Overview

Doc update

The documentation now includes two additional ontology references while retaining the existing references.

Mde Plugin Wsl

Doc update

Two Microsoft DevRel ontology links were added alongside the existing references on the WSL plugin page.

Rbac

Doc update

Several internal DevRel and ontology links in the Defender for Endpoint RBAC page were replaced with updated authoring references.

Respond File Alerts

Doc update

The documentation page’s internal DevRel metadata references were updated. The published page URL remains the same.

Run Live Response

Doc update

The page’s DevRel ontology references were replaced with updated links.

Support Scams

Doc update

The page’s supporting DevRel and Microsoft DevRel ontology links were replaced with updated references.

Switch To Mde Troubleshooting

Doc update

Two DevRel ontology reference URLs were replaced; the corresponding authoring-document links remain unchanged.

Web Content Filtering

Doc update

The documentation page’s ontology and authoring metadata links were updated.

Microsoft Defender Endpoint Releases

Doc updateAction required

The release notes now list iOS build 1.1.82230103, released October 24, 2026, and direct administrators to allow required Microsoft Defender for Endpoint URLs through firewalls and proxies.

Access Mssp Portal

Doc update

The Defender for Endpoint MSSP portal article now includes two additional authoring references.

Address Unwanted Behaviors Mde

Doc update

The article retains two DevRel Offering Ontology links and removes two corresponding authoring-document links from its metadata.

Ai Agent Support Matrix

Doc update

Two internal metadata links in the AI agent support matrix were replaced with new DevRel ontology and authoring-document references.

Amsi On Mdav

Doc update

Two DevRel ontology metadata links were refreshed in the article, with their URL values unchanged.

Apis Intro

Doc update

The page now includes two additional authoring-documentation links.

Automated Investigations

Doc update

The page’s DevRel offering ontology reference was changed to a different identifier.

Automation Levels

Doc update

The article now includes two additional DevRel Offering Ontology links.

Collect Diagnostic Data

Doc update

The diagnostic data collection article now includes two DevRel Offering Ontology links.

Configure Endpoints Sccm

Doc update

Two DevRel ontology references were replaced with new Microsoft DevRel Offering Ontology URLs.

Configure Endpoints Script

Doc update

The page formatting was normalized for two internal authoring links; their destinations remain unchanged.

Configure Mssp Support

Doc update

The page now points to two new DevRel authoring references, replacing the two previous links.

Configure Proxy Internet

Doc update

Two DevRel offering ontology metadata lines were refreshed, with the referenced URLs unchanged.

Device Control Faq

Doc update

The Device Control FAQ now includes two DevRel Offering Ontology links.

Device Control Overview

Doc update

Two authoring-resource URLs in the Device Control overview documentation were replaced with new URLs.

Device Control Walkthroughs

Doc update

The page’s two DevRel offering ontology links were changed to new authoring-docs-microsoft URLs.

Device Health Reports

Doc update

Two DevRel offering ontology links on the device health reports page were refreshed; their URLs remain unchanged.

Device Inventory Field Reference

Doc update

The documentation removes two authoring-resource links while retaining two existing links in the device inventory field reference.

Devices Overview

Doc update

Two existing authoring-document links were replaced with two new links.

Edr In Block Mode

Doc update

The page now includes two Microsoft DevRel Offering Ontology links.

Enable Exploit Protection

Doc update

The page’s associated DevRel ontology links were revised: four links were removed and two were added.

Exploit Protection

Doc update

Two DevRel offering ontology links in the exploit protection page were replaced with new identifiers.

Exploits Malware

Doc update

The page now includes two additional internal authoring links.

Fetch Alerts Mssp

Doc update

Two Microsoft DevRel Offering Ontology links in the documentation were replaced with new references.

Fileless Threats

Doc update

Two authoring metadata link lines were rewritten, but the link destinations and documented guidance remain unchanged.

Get Live Response Result

Doc update

The documentation formatting for two ontology link entries was updated; the URL targets are unchanged.

Get Remediation Methods Properties

Doc update

Two DevRel Offering Ontology reference entries were updated on the Get remediation methods properties page; the displayed URLs remain unchanged.

Host Firewall Reporting

Doc update

Two DevRel ontology metadata entries were updated, while their referenced URLs remain unchanged.

Import Ti Indicators

Doc update

Two authoring-document reference entries were rewritten, with their URLs unchanged.

Indicator File

Doc update

The indicator file documentation now uses two updated DevRel ontology URLs.

Indicator Ip Domain

Doc update

The indicator-ip-domain documentation replaces two DevRel Offering Ontology links with updated references.

Indicators Overview

Doc update

The Defender for Endpoint indicators overview documentation replaced two internal authoring-document links with new references.

Investigate Behind Proxy

Doc update

Two authoring metadata link entries were refreshed; their URL values remain unchanged.

Investigate Machines

Doc update

The page’s internal DevRel references were replaced with two different references.

Investigate User

Doc update

Two internal reference entries were revised, while both URLs remain unchanged.

Ios Install

Doc update

Two ontology reference entries on the iOS installation page were updated, with their URLs unchanged.

Ios Install Unmanaged

Doc update

The page’s two DevRel Offering Ontology metadata entries were updated, while the displayed URLs remain unchanged.

Isolate Machine

Doc update

The documentation now includes two additional authoring-documentation links.

Linux Off Board Endpoints

Doc update

Two DevRel Offering Ontology reference lines were refreshed; the URLs remain unchanged in the supplied diff.

Live Response

Doc update

The live response article now includes two Microsoft DevRel Offering Ontology links.

Mac Health Status

Doc update

The page now retains two DevRel Offering Ontology links and removes two authoring-docs-microsoft.poolparty.biz links.

Manage Device Scope Relevance

Doc update

Two DevRel reference entries in the device scope and relevance documentation were updated, while their URLs remain the same.

Mde P1 Setup Configuration

Doc update

The Defender for Endpoint setup and configuration page now uses two revised DevRel offering ontology links.

Mde Sap Windows Server

Doc update

Two Microsoft DevRel offering-ontology links were removed while the corresponding authoring-documentation links remain.

Network Protection

Doc update

Two DevRel Offering Ontology links in the Network Protection article were replaced.

Network Protection Macos

Doc update

Two reference links were changed from authoring-docs-microsoft.poolparty.biz to microsoft-devrel.poolparty.biz.

Offboard Machines

Doc update

Two authoring-document reference entries were refreshed; their displayed URLs remain unchanged.

Phishing

Doc update

The Defender for Endpoint phishing page now lists two fewer reference links; two existing links remain.

Phishing Trends

Doc update

The page now includes two additional authoring reference links.

Prepare Deployment

Doc update

The prepare-deployment page replaced four existing DevRel metadata references with two new authoring records.

Prevent Malware Infection

Doc update

The malware prevention documentation now references a different DevRel offering ontology identifier.

Respond Machine Alerts

Doc update

Two internal authoring-reference lines were rewritten, with the same URLs retained.

Review Detected Threats

Doc update

The document’s DevRelOfferingOntology reference changed from one identifier to another.

Run Analyzer Windows

Doc update

Two DevRel authoring references were refreshed; their URLs remain unchanged.

Safety Scanner Download

Doc update

The Safety Scanner download page now includes two Microsoft DevRel offering ontology links.

Supply Chain Malware

Doc update

The supply-chain malware page now includes two additional authoring-document links.

Switch To Mde Phase 1

Doc update

The page now includes two additional links to Microsoft authoring documentation resources.

Switch To Mde Phase 2

Doc update

The page’s DevRel Offering Ontology links were replaced with updated references.

Tamper Protection Faq

Doc update

Two internal authoring-document references were updated in the tamper protection FAQ; their URLs remain the same.

Time Settings

Doc update

The page’s DevRel Offering Ontology reference was changed to a different identifier.

Understanding Malware

Doc update

Two authoring-document links in the Understanding malware article were replaced with new links.

Unwanted Software

Doc update

The page’s two authoring-document reference entries were updated in formatting; their URLs remain unchanged.

User Roles

Doc update

The Defender for Endpoint user roles page now points to different internal DevRel reference URLs.

Validate Antimalware

Doc update

The page’s DevRel ontology reference was changed to a different reference.

View Incidents Queue

Doc update

The incident queue page now includes two DevRel Offering Ontology links.

Web Protection Monitoring

Doc update

Two internal authoring-reference lines were rewritten, with the URLs unchanged in the supplied diff.

Worms Malware

Doc update

The page now includes two additional reference links.

Whats New In Microsoft Defender Endpoint

Generally available

The documentation adds antivirus audit mode for Linux as generally available. It provides real-time malware detection and alerting without automatically quarantining files or terminating processes.

Aggregated Reporting

Doc update

The aggregated reporting page no longer includes two Microsoft DevRel ontology links.

Android Configure Mam

Doc update

The Android MAM configuration article no longer includes two authoring-docs.microsoft.com links.

Behavioral Blocking Containment

Doc update

The page no longer includes four internal authoring and DevRel ontology links. No other content changes are shown.

Client Behavioral Blocking

Doc update

The client behavioral blocking documentation no longer includes two internal authoring-document references.

Configure Environment

Doc update

The Defender for Endpoint environment configuration page no longer includes two DevRel Offering Ontology links.

Configure Machines

Doc update

Two internal DevRel/PoolParty reference links were removed from the machine configuration documentation.

Delete Library

Doc update

The page no longer includes two DevRel Offering Ontology links.

Device Discovery

Doc update

The device discovery page no longer includes four links to Microsoft’s internal authoring resources.

Endpoint Detection Response

Doc update

The Endpoint Detection and Response overview page no longer includes two Microsoft DevRel ontology links.

Feedback Loop Blocking

Doc update

The Defender for Endpoint feedback loop blocking article no longer includes four internal ontology and authoring references.

Get File Related Alerts

Doc update

The Get file-related alerts API documentation no longer includes two internal authoring-document links.

Gov

Doc update

The Defender for Endpoint government cloud page no longer includes two authoring-document links.

Ios Configure Features

Doc update

The Defender for Endpoint iOS features documentation no longer includes two DevRel Offering Ontology links.

Linux Exclusions

Doc update

Four internal DevRel and ontology links were removed from the Microsoft Defender for Endpoint Linux exclusions page.

Linux Install With Puppet

Doc update

The Defender for Endpoint Linux installation with Puppet documentation no longer includes two DevRel ontology links.

Linux Support Perf

Doc update

The Linux support and performance page no longer includes two internal authoring URLs.

List Library Files

Doc update

Two DevRel Offering Ontology links were removed from the page.

Mac Support Perf

Doc update

The macOS support performance page no longer includes two internal authoring-document links.

Management Apis

Doc update

The Defender for Endpoint management APIs page no longer includes four internal DevRel/PoolParty reference links.

Mde Sdp Strategy

Doc update

The Microsoft Defender for Endpoint SDP strategy page no longer includes four internal authoring links.

Mde Side By Side

Doc update

The Defender for Endpoint side-by-side documentation no longer includes two DevRel ontology links.

Minimum Requirements

Doc update

The Defender for Endpoint minimum requirements page no longer contains two DevRel ontology links.

Network Devices

Doc update

The article no longer includes two Microsoft DevRel Offering Ontology links.

Production Deployment

Doc update

The article no longer includes two Microsoft DevRel Offering Ontology links.

Run Analyzer Linux

Doc update

The page no longer includes two DevRel Offering Ontology links. No other content changes are shown.

Switch To Mde Overview

Doc update

The Defender for Endpoint overview page no longer includes two DevRel Offering Ontology links.

Unisolate Machine

Doc update

The documentation page no longer includes two internal authoring references.

Unrestrict Code Execution

Doc update

The Unrestrict code execution API documentation no longer includes two authoring references.

Use Client Analyzer

Doc update

The `use-client-analyzer` page no longer contains four internal DevRel/PoolParty reference links.

13

Mac Troubleshoot Netext Mde

Doc update

Two DevRel Offering Ontology links were replaced in the Microsoft Defender for Endpoint macOS troubleshooting page.

Troubleshoot Mdatp

Doc update

The Microsoft Defender for Endpoint troubleshooting page now includes two additional authoring-related links.

Ios Troubleshoot

Doc update

The Defender for Endpoint iOS troubleshooting page no longer includes two DevRel Offering Ontology links.

10

Api Hello World

Doc update

The page’s DevRel offering ontology references were updated: one link was replaced and three links were added.

Api Explorer

Doc update

The API Explorer article now includes two additional authoring reference links.

9

Onboard Client

Doc update

Two authoring metadata entries were updated, with their URLs remaining unchanged.

Onboard Downlevel

Doc update

The down-level onboarding page now includes two Microsoft DevRel Offering Ontology links.

Onboard Server

Doc update

Two DevRel ontology links in the server onboarding documentation were replaced with new references.

7
1

Stop And Quarantine File

Doc update

The Stop and quarantine a file API page no longer contains two internal authoring references.

1
133

Preset Security Policies

Doc update

Two authoring references were replaced, and two Microsoft DevRel ontology links were added.

Reports Email Security

Doc update

The page replaced two authoring reference links with corresponding Microsoft DevRel ontology links and retained the other two references.

Mdo Sec Ops Guide

Doc update

Two related-resource links were removed from the Microsoft Defender for Office 365 security operations guide; two existing links remain.

Air Custom Reporting

Doc update

Two ontology links were changed from the authoring-docs endpoint to the Microsoft DevRel endpoint.

Attack Simulation Training Payloads

Doc update

Two authoring-documentation links were replaced with Microsoft DevRel ontology links; two existing ontology links remain unchanged.

Quarantine About

Doc update

Two documentation references were changed from authoring-docs-microsoft.poolparty.biz URLs to microsoft-devrel.poolparty.biz URLs.

Quarantine Policies

Doc update

The quarantine policies page now uses updated DevRel ontology and authoring references, replacing several previous links.

Scc Permissions

Doc update

The page’s internal DevRel and offering-ontology URLs were replaced with updated references.

Submissions Result Definitions

Doc update

Two linked references in the submission result definitions page were replaced with different references; two existing references remain unchanged.

Air About

Doc update

The article’s two DevRel ontology links were updated to new Microsoft DevRel URLs.

Air Auto Remediation

Doc update

Two ontology references in the AIR auto-remediation documentation were updated to new Microsoft DevRel PoolParty URLs.

Anti Malware Protection About

Doc update

The page replaces two authoring-docs.microsoft.com PoolParty links with microsoft-devrel.microsoft.com PoolParty links.

Anti Phishing Protection About

Doc update

Two DevRel ontology links were updated from authoring-docs-microsoft.poolparty.biz URLs to microsoft-devrel.poolparty.biz URLs.

Audit Log Search Defender Portal

Doc update

Two ontology metadata-link lines were rewritten with the same URLs. No administrator-facing procedure or setting changed in the supplied diff.

Campaigns

Doc update

The campaigns documentation replaced its internal DevRel ontology and authoring metadata links with new references.

Connectors Remove Blocked

Doc update

The blocked-connectors documentation page now includes two additional authoring documentation links.

Mdo About

Doc update

The overview page removed two internal reference links and retained two others.

Mdo Email Entity Page

Doc update

Two DevRel ontology links were replaced with updated Microsoft DevRel URLs.

Mdo Gov

Doc update

Two internal DevRel ontology references were replaced with updated Microsoft DevRel ontology URLs.

Office 365 Ti

Doc update

The documentation diff updates two internal authoring-document reference entries; the displayed URLs remain unchanged.

Pim In Mdo Configure

Doc update

Two internal authoring references on the PIM in Microsoft Defender for Office 365 configuration page were replaced with new URLs.

Quarantine End User

Doc update

Two internal authoring-document links in the end-user quarantine article were replaced.

Quarantine Faq

Doc update

The FAQ replaced two internal authoring-document references with two new URLs.

Quarantine Shared Mailbox Messages

Doc update

Two internal authoring-document links were replaced on the Defender for Office 365 page about quarantined shared mailbox messages.

Safe Links Policies Configure

Doc update

Two supporting DevRel ontology links on the Safe Links policy configuration page were replaced with new Microsoft DevRel URLs.

Secure By Default

Doc update

Two authoring-reference lines were replaced with identical URLs. No administrator-facing content change is shown.

Outbound Spam Restore Restricted Users

Doc update

The guidance now recommends running the Blocked Sender History self-help diagnostic before unblocking a user to review listing and delisting history and the sender’s MFA status.

Air Examples

Doc update

The AIR examples page no longer contains two internal authoring references.

Index

Doc update

The index page no longer includes two authoring-documentation links.

Mdo Data Retention

Doc update

The data retention article no longer includes two internal authoring links.

Mdo Deployment Guide

Doc update

The Microsoft Defender for Office 365 deployment guide no longer includes two internal authoring links.

Mdo Portal Permissions

Doc update

The Microsoft Defender for Office 365 portal permissions page no longer includes two internal authoring links.

Mdo Privacy

Doc update

The page no longer contains two links to the internal authoring documentation system.

Mdo Threat Classification

Doc update

The Microsoft Defender for Office 365 threat classification article no longer includes two internal authoring-document links.

Step By Step Guide Overview

Doc update

The Defender for Office 365 step-by-step guide overview no longer includes two authoring-document links.

Threat Trackers

Doc update

The Threat trackers page no longer includes two links to authoring-docs-microsoft.poolparty.biz resources.

User Tags About

Doc update

The User tags documentation no longer includes two authoring references.

Zero Hour Auto Purge

Doc update

The article no longer includes two links to internal authoring resources.

2

Threat Explorer Threat Hunting

Doc update

Two internal reference links in the Threat Explorer threat hunting article were replaced with updated Microsoft DevRel ontology links.

2
1
1
1
61

Migrate To Sensor V3

Doc update

Four associated PoolParty metadata links were replaced in the Defender for Identity Sensor v3 migration documentation.

Security Assessment

Doc update

The page now includes two additional authoring-documentation links alongside the existing ontology references.

Cloud Identities

Doc update

Two internal DevRel ontology links on the cloud identities security posture assessments page were replaced.

Hybrid Security

Doc update

The hybrid security page now includes two additional reference links.

Activate Sensor

Doc update

Two Microsoft DevRel ontology links were replaced, and the associated authoring links were reordered.

Alerts Mdi Classic

Doc update

The page replaced two authoring-documentation URLs. The associated DevRel ontology links were unchanged.

Dashboard

Doc update

The page replaced four internal metadata references with four updated authoring-documentation links.

Reports

Doc update

The page now includes two additional authoring-documentation links alongside the existing ontology references.

Sensor Settings

Doc update

The page’s internal DevRel ontology and authoring references were reordered.

Accounts

Doc update

Two existing DevRel reference URLs were replaced with new URLs in the documentation metadata.

Certificates

Doc update

The page’s DevRel Offering Ontology references were changed to new identifiers.

Connect Cyber Ark

Doc update

The Defender for Identity CyberArk documentation now includes two additional DevRel Offering Ontology links.

Connect Sail Point

Doc update

Two DevRel ontology links were updated to new authoring-docs locations.

Identity Infrastructure

Doc update

The identity infrastructure assessment page was updated, while the two authoring links shown in the diff remain unchanged.

Identity Inventory

Doc update

The page’s internal authoring reference was updated to a different URL.

Investigate Domain

Doc update

Two internal ontology links in the article were replaced with updated authoring-system links.

Manage Action Accounts

Doc update

Two authoring-document links on the Manage action accounts page were updated, with their URLs unchanged.

Monitored Activities

Doc update

The page now includes two additional links to Microsoft authoring resources.

Multi Forest

Doc update

The article’s two authoring-documentation links were replaced with different references.

Ops Guide

Doc update

Two internal authoring-reference entries were refreshed in the operations guide; their displayed URLs remain unchanged.

Ops Guide Daily

Doc update

Two authoring reference entries were replaced with identical URLs. No operational guidance changed in the supplied diff.

Ops Guide Monthly

Doc update

Two existing authoring links were replaced with identical URLs; no content change is shown in the supplied diff.

Ops Guide Weekly

Doc update

The weekly Defender for Identity operations guide rewrote two authoring-documentation link entries; the URLs remain unchanged.

Password Protection

Doc update

The page replaced two authoring-document links with new references.

Remediation Actions

Doc update

Two DevRel ontology reference entries were rewritten with the same URLs.

Role Groups

Doc update

The role-groups page replaced four internal ontology links with two updated authoring references.

Settings About

Doc update

Two ontology reference entries were replaced with identical URLs; no visible product or configuration content changed.

Test Sensor

Doc update

Two Microsoft DevRel Offering Ontology links on the page were replaced with different references.

Uninstall Sensor

Doc update

Two DevRel ontology links were added to the uninstall sensor documentation.

Zero Trust

Doc update

The page replaced four DevRel ontology and authoring reference URLs with two new authoring-document links.

Cef Format Sa

Doc update

The page no longer includes four internal DevRel ontology and authoring links.

Configure Port Mirroring

Doc update

The Defender for Identity port-mirroring page no longer includes four internal authoring links.

Configure Proxy

Doc update

The Defender for Identity proxy configuration page no longer includes two internal authoring links.

Configure Sensor Settings

Doc update

The Defender for Identity sensor settings page no longer includes two internal authoring links.

Entity Tags

Doc update

The Entity tags page no longer includes two DevRel ontology reference links.

Notifications

Doc update

The Defender for Identity notifications page no longer includes two authoring-docs reference links.

Prerequisites Standalone

Doc update

The Defender for Identity standalone prerequisites page no longer includes four internal authoring links.

Privacy Compliance

Doc update

The Defender for Identity privacy and compliance page removed two links to Microsoft authoring resources.

Technical Faq

Doc update

The technical FAQ no longer includes four authoring-docs reference links.

Test Connectivity

Doc update

The connectivity testing documentation no longer includes four internal DevRel metadata links.

Troubleshooting Using Logs

Doc update

The “Troubleshooting using logs” article no longer includes two authoring-documentation links.

Unsafe Permissions Dns Admins Group

Doc update

Two internal authoring links were removed from the Defender for Identity article about unsafe permissions in the DNS Admins group.

Us Govt Gcc High

Doc update

The US Government GCC High documentation page removes two authoring-docs links.

What Is

Doc update

The `what-is.md` page no longer contains four internal DevRel ontology and authoring links.

Whats New Archive

Doc update

The what's-new archive no longer includes four internal DevRel/PoolParty reference links.

3

Deploy Sensor V3

Doc update

Several internal DevRel/PoolParty reference links on the page were replaced.

93

Investigate Risky Oauth

Doc update

Two authoring-document links were replaced on the Defender for Cloud Apps risky OAuth investigation page.

App Onboarding

Doc update

Several internal authoring-documentation references in the Defender for Cloud Apps app onboarding page were replaced.

Applications Inventory

Doc update

The page’s DevRel/PoolParty metadata links were replaced with updated references.

Ip Tags

Doc update

Two DevRel ontology links on the IP tags page were replaced with updated Microsoft DevRel links.

Mde Govern

Doc update

The page’s DevRel reference links were updated to point to different metadata entries.

Proxy Deployment Any App Idp

Doc update

The Defender for Cloud Apps proxy deployment page now includes additional authoring reference links while retaining the existing references.

Access Policy Aad

Doc update

The page’s DevRel reference links were revised: six links were removed and two replacement links were added.

Accounts

Doc update

The Defender for Cloud Apps Accounts page now includes two additional authoring references.

Activity Privacy

Doc update

The page now includes two additional Microsoft DevRel Offering Ontology links.

Additional Integrations

Doc update

Two existing authoring-link entries were updated, while their displayed URLs remain unchanged.

Admin Settings

Doc update

The Defender for Cloud Apps admin settings page now references a different DevRel Offering Ontology identifier.

App Governance Faq

Doc update

Two internal DevRel ontology references in the FAQ were replaced with new references.

Attack Paths

Doc update

Two DevRel reference links in the Attack paths documentation were replaced with updated URLs.

Best Practices

Doc update

Two authoring-document links on the best-practices page were replaced with two different links.

Cloud Discovery Policies

Doc update

The page’s internal DevRel ontology and authoring-document references were replaced with new links.

Corrata Integration

Doc update

The Corrata integration page now includes two additional DevRel Offering Ontology links.

Custom Log Parser

Doc update

Two DevRel Offering Ontology links were added to the custom log parser page.

Discovered App Queries

Doc update

Two authoring metadata link entries on the discovered app queries page were refreshed; their URLs remain unchanged.

Discovered Apps

Doc update

Two authoring-reference URLs in the Discovered apps article were replaced with new URLs.

Discovery Docker Windows

Doc update

The page now includes two additional links to Microsoft DevRel Offering Ontology entries.

Discovery Kubernetes

Doc update

Two DevRel ontology links in the Kubernetes discovery documentation were updated to new URLs.

Governance Actions

Doc update

The governance actions page replaced two internal authoring references with two updated references.

Iboss Integration

Doc update

The page now includes two Microsoft DevRel Offering Ontology links.

Investigate

Doc update

The investigation page now includes two additional authoring reference links.

Mail Settings

Doc update

The Mail Settings documentation now includes two Microsoft DevRel Offering Ontology links.

Manage Admins

Doc update

The page’s internal DevRel and offering-ontology references were refreshed, with existing links removed and new links added.

Mde Investigation

Doc update

Two DevRel Offering Ontology links were replaced with different ontology identifiers.

Menlo Integration

Doc update

Two Microsoft DevRel Offering Ontology links were added to the Menlo integration page.

Network Requirements

Doc update

Two internal authoring-document links were replaced with new references.

Ops Guide Ad Hoc

Doc update

Two DevRel Offering Ontology links were replaced with new identifiers.

Ops Guide Daily

Doc update

The Defender for Cloud Apps daily operations guide now uses two new authoring reference URLs.

Ops Guide Monthly

Doc update

Two authoring reference entries in the Defender for Cloud Apps monthly operations guide were updated; the displayed URLs remain unchanged.

Ops Guide Weekly

Doc update

Two internal DevRel ontology links in the Defender for Cloud Apps weekly operations guide were replaced with new references.

Policies Threat Protection

Doc update

Two DevRel reference links in the Defender for Cloud Apps threat protection policies page were replaced.

Policy Template Reference

Doc update

The policy template reference now includes two additional Microsoft DevRel Offering Ontology links.

Protect Asana

Doc update

Two DevRel ontology links were updated to new authoring-documentation URLs.

Protect Gcp

Doc update

Two internal authoring links in the Defender for Cloud Apps GCP protection article were replaced.

Protect Mural

Doc update

The Protect Mural article replaced two authoring reference links with two different links.

Protect Salesforce

Doc update

The article replaced two internal authoring-document links with two new links.

Protect Workplace

Doc update

The page’s internal authoring reference was changed to a new URL.

Protect Zendesk

Doc update

Two internal DevRel ontology links in the Defender for Cloud Apps Zendesk documentation were replaced.

Proxy Idp Adfs

Doc update

The page now includes two Microsoft DevRel Offering Ontology links.

Proxy Idp Okta

Doc update

Two internal authoring-document links were replaced in the Defender for Cloud Apps Okta proxy IDP documentation.

Proxy Idp Pingone

Doc update

The page replaced two authoring-document links with two different authoring-document links.

Release Note Archive

Doc update

The release-note archive now includes two additional linked resources.

Release Notes

Doc update

Two internal authoring links in the release notes were replaced with updated links.

Session Policy Aad

Doc update

Several DevRel and ontology links were replaced with updated references.

Tutorial Dlp

Doc update

Two reference links in the Defender for Cloud Apps DLP tutorial were changed.

Tutorial Flow

Doc update

The Defender for Cloud Apps tutorial now includes two additional DevRel ontology links.

Tutorial Proxy

Doc update

The tutorial replaced two authoring-document links with two different links.

Tutorial Shadow It

Doc update

The Defender for Cloud Apps Shadow IT tutorial now includes two additional DevRel offering ontology links.

User Activity Policies

Doc update

Two Microsoft DevRel Offering Ontology references were replaced with updated links.

User Groups

Doc update

Two DevRel ontology links were updated to new Microsoft DevRel URLs.

What Is Defender For Cloud Apps

Doc update

Two internal authoring-document links in the Defender for Cloud Apps overview article were replaced with new links.

Working With App Page

Doc update

Two authoring-documentation links were replaced with new destinations in the Defender for Cloud Apps app page.

Zero Trust

Doc update

Two internal authoring links in the Defender for Cloud Apps Zero Trust article were replaced with two new links.

Attest Your App

Doc update

The documentation removes two internal authoring URLs from the app attestation page. No other content changes are shown.

Mde Integration

Doc update

The MDE integration documentation no longer includes four internal authoring references.

40

Api Authentication

Doc update

The Defender for Cloud Apps API authentication page now includes two additional reference links.

Api Data Enrichment

Doc update

The page now includes four links to Microsoft DevRel ontology and authoring resources.

Api Tokens Legacy

Doc update

The legacy API tokens page now uses updated DevRel ontology and authoring-document references.

Api Activities

Doc update

The API activities page now includes two additional DevRel Offering Ontology links.

Api Activities List

Doc update

Two DevRel Offering Ontology URLs were replaced with two different ontology URLs.

Api Alerts

Doc update

The Defender for Cloud Apps API alerts page now includes two additional Microsoft DevRel Offering Ontology links.

Api Alerts Close Benign

Doc update

The page’s associated DevRel Offering Ontology links were replaced with updated references.

Api Alerts Fetch

Doc update

The documentation now includes two Microsoft DevRel Offering Ontology links.

Api Alerts List

Doc update

Two DevRel ontology links were replaced with updated links.

Api Alerts Mark Unread

Doc update

The API alerts documentation now includes two Microsoft DevRel Offering Ontology links.

Api Data Enrichment List

Doc update

The page’s DevRel offering ontology links were updated, replacing two references with two new ones.

Api Data Enrichment Update

Doc update

The API data enrichment documentation now includes two Microsoft DevRel Offering Ontology links.

Api Discovery

Doc update

The API Discovery documentation now includes two additional Microsoft DevRel Offering Ontology URLs.

Api Discovery Finalize

Doc update

The API Discovery finalize page now includes two additional Microsoft DevRel Offering Ontology links.

Api Discovery Initiate

Doc update

The page now includes two additional Microsoft DevRel Offering Ontology links.

Api Discovery List Streams

Doc update

The API discovery streams documentation now contains different DevRel/PoolParty metadata links.

Api Discovery Perform

Doc update

The article now references different DevRel ontology and authoring metadata URLs.

Api Discovery Script

Doc update

Two internal DevRel and authoring metadata links were replaced with new references on the API Discovery Script page.

Api Entities

Doc update

The API entities page now includes two additional DevRel Offering Ontology links.

Api Entities Fetch

Doc update

The page’s DevRel ontology and authoring-document reference links were replaced.

Api Entities Fetch Tree

Doc update

Two DevRel ontology and authoring-document references were replaced with new links.

Api Entities List

Doc update

The page’s DevRel ontology and authoring-reference links were updated.

Api Files

Doc update

The page now includes two Microsoft DevRel Offering Ontology links.

Api Files Fetch

Doc update

The documentation’s DevRel ontology and authoring metadata links were replaced with new references.

Api Files List

Doc update

The Files API documentation’s internal offering-ontology references were updated.

2

Troubleshoot Policies

Doc update

The Defender for Cloud Apps troubleshooting page now includes two Microsoft DevRel Offering Ontology links.

1

App Activity Threat Hunting

Doc update

Two authoring-document links in the App activity threat hunting article were replaced with new URLs.

1
243

Deprecated Alerts

Doc update

The documentation now includes four additional reference URLs.

Ai Model Security

Doc update

The page’s DevRel ontology and authoring metadata links were replaced with updated references.

Ai Security Posture

Doc update

The page now includes two additional Microsoft DevRel Offering Ontology links.

Release Notes

Public preview

The Defender portal now supports evaluating Azure resources against the Defender for Cloud baseline, creating custom posture policies, and centrally managing recommendation exemptions with lifecycle tracking.

Index

Doc update

The page now includes product taxonomy references for Microsoft cloud and service offerings.

Alerts Containers

Doc update

The documentation reordered four authoring reference links.

Alerts Defender For Apis

Doc update

The page’s authoring reference links were updated, with two new links added while existing references were retained.

Alerts Reference

Doc update

The alerts reference page now includes four additional DevRel/PoolParty reference links.

Binary Drift Detection

Doc update

The article’s DevRel and offering-ontology reference links were replaced and additional links were added.

Container Image Mapping

Doc update

Four ontology and authoring reference links were added to the Defender for Cloud container image mapping page.

Cross Tenant Management

Doc update

The cross-tenant management page now includes two additional authoring-documentation links.

Data Collection Rule

Doc update

Several internal reference links on the Defender for Cloud data collection rule page were updated.

Permissions

Doc update

The Defender for Cloud permissions page now includes four additional reference links.

Regional Availability

Doc update

The Defender for Cloud regional availability page replaced two DevRel references and added four updated documentation and ontology links.

Review Exemptions

Doc update

The Defender for Cloud review exemptions page now includes four additional authoring reference links.

Secrets Scanning

Doc update

The secrets scanning article now includes four additional DevRel reference links.

Tutorial Protect Resources

Doc update

The tutorial’s DevRel ontology links were updated and several previous reference URLs were replaced.

Add Data Power Bi

Doc update

Two authoring metadata links were reformatted; their URLs remain unchanged.

Alerts Ai Workloads

Doc update

The Defender for Cloud AI workloads alerts page now includes two additional authoring reference links.

Alerts Azure Cosmos Db

Doc update

The Azure Cosmos DB alerts page now includes two additional authoring references.

Alerts Azure Network Layer

Doc update

Two DevRel ontology links on the documentation page were replaced with new Microsoft DevRel URLs.

Alerts Azure Storage

Doc update

Several internal documentation links in the Azure Storage alerts article were replaced with updated references.

Alerts Dns

Doc update

The page’s two authoring references were updated, with their visible URLs unchanged.

Alerts Resource Manager

Doc update

The Defender for Cloud Resource Manager alerts documentation now includes two additional authoring references.

Anti Malware

Doc update

The page’s ontology and authoring references were replaced with new URLs.

Cloud Scopes Unified Rbac

Doc update

Two DevRel ontology references in the cloud scopes unified RBAC documentation now point to updated Microsoft DevRel URLs.

Code To Runtime Mapping

Doc update

The Defender for Cloud code-to-runtime mapping page now includes two additional authoring reference links.

Configure Google Plans

Doc update

The Defender for Cloud Google plans article now includes two Microsoft DevRel Offering Ontology links.

Containers Permissions

Doc update

The documentation replaced two DevRel ontology and authoring references with new links.

Data Classification

Doc update

The data classification page now includes two additional Microsoft DevRel Offering Ontology links.

Defender Cli Syntax

Doc update

The page now includes two additional Microsoft DevRel Offering Ontology links.

Defender For Apis Manage

Doc update

The Defender for APIs management page now includes two DevRel Offering Ontology links.

Defender For Apis Prepare

Doc update

Two DevRel ontology and authoring metadata references on the page were replaced with new references.

Defender For Apis Validation

Doc update

The page source updates two authoring-document reference lines, while the visible URLs remain unchanged.

Defender For Cosmos

Doc update

The page now includes two additional Microsoft DevRel Offering Ontology links.

Defender For Databases Overview

Doc update

The page’s reference metadata was revised by removing two DevRel ontology links while retaining the corresponding authoring-documentation links.

Defender For Databases Usage

Doc update

Two authoring-documentation links were replaced with the same URLs; no guidance content changed in the supplied diff.

Defender For Dns Alerts

Doc update

The page’s DevRelOfferingOntology reference changed from one identifier to another.

Defender For Sql Alerts

Doc update

The page’s two authoring-document reference entries were synchronized; the referenced URLs remain unchanged.

Defender For Sql Servers Introduction

Doc update

Two internal DevRel ontology links on the Defender for SQL servers introduction page were replaced with new Microsoft DevRel Offering Ontology URLs.

Defender For Sql Usage

Doc update

Two reference links were changed from authoring-docs locations to microsoft-devrel DevRelOfferingOntology locations.

Defender For Storage Test

Doc update

Two Microsoft DevRel ontology and authoring-document references were replaced in the Defender for Storage documentation.

Easm

Doc update

The page now includes two additional Microsoft DevRel Offering Ontology links.

Episode Eighteen

Doc update

The Defender for Cloud Episode Eighteen article now includes two additional DevRel Offering Ontology links.

Episode Eleven

Doc update

The Episode Eleven documentation now includes two additional DevRel Offering Ontology links.

Episode Fifty One

Doc update

The episode 51 documentation now includes two DevRel Offering Ontology links.

Episode Fifty Six

Doc update

The Defender for Cloud Episode Fifty-Six article now includes two additional DevRel Offering Ontology links.

Episode Fifty Two

Doc update

The page now includes two additional Microsoft DevRel Offering Ontology links.

Episode Forty Seven

Doc update

The article now includes two Microsoft DevRel Offering Ontology links.

Episode Forty Six

Doc update

The Episode 46 page now includes two Microsoft DevRel Offering Ontology links.

Episode Fourteen

Doc update

The Defender for Cloud Episode Fourteen documentation now includes two additional DevRel Offering Ontology links.

Episode Nine

Doc update

Two internal authoring references were updated; the displayed URLs remain unchanged.

Episode Nineteen

Doc update

The page now includes two additional DevRel Offering Ontology links.

Episode Sixteen

Doc update

The Episode Sixteen documentation now includes two additional DevRel Offering Ontology links.

Episode Sixty Five

Doc update

The documentation page now includes two additional DevRel Offering Ontology links.

Episode Sixty Four

Doc update

The page now includes two Microsoft DevRel Offering Ontology links.

Episode Sixty Six

Doc update

The page’s two authoring-reference entries were updated, while the visible URLs remain unchanged.

Episode Ten

Doc update

The page now includes two Microsoft DevRel Offering Ontology links.

Episode Thirteen

Doc update

The page now includes two additional DevRel Offering Ontology links.

Episode Thirty Nine

Doc update

The page now includes two additional links to the Microsoft DevRel Offering Ontology.

Episode Thirty One

Doc update

The documentation now includes two additional DevRel Offering Ontology links.

Episode Thirty Six

Doc update

The page now includes two additional DevRel Offering Ontology links.

Episode Thirty Three

Doc update

The episode thirty-three page now includes two additional DevRel Offering Ontology links.

Episode Thirty Two

Doc update

The episode thirty-two documentation now includes two Microsoft DevRel Offering Ontology links.

Episode Twelve

Doc update

The page now includes two additional links to Microsoft DevRel Offering Ontology resources.

Episode Twenty Five

Doc update

The page now includes two additional DevRel Offering Ontology links.

Episode Twenty Four

Doc update

The Defender for Cloud Episode Twenty-Four page now includes two additional DevRel Offering Ontology links.

Episode Twenty Seven

Doc update

The page now includes two additional Microsoft DevRel Offering Ontology links.

Episode Twenty Three

Doc update

The page retains the same two authoring URLs; the supplied diff shows no visible change to their text or destinations.

Episode Twenty Two

Doc update

The article’s reference-link list was revised, removing one previously listed link.

Estimate Track Costs

Doc update

The cost estimation and tracking documentation now includes two Microsoft DevRel Offering Ontology links.

Faq Defender For Apis

Doc update

The FAQ now points to two new Microsoft DevRel ontology URLs instead of the previous authoring-docs URLs.

Faq Defender For Servers

Doc update

Removed two authoring-document links while retaining the corresponding DevRel offering ontology links.

Faq Defender For Storage

Doc update

Two internal authoring-reference entries were updated; the referenced URLs remain unchanged.

Faq Scanner Detection

Doc update

Two authoring-reference entries were updated, while their visible URLs remain unchanged.

Harden Docker Hosts

Doc update

The page now includes two Microsoft DevRel Offering Ontology links.

Iac Template Mapping

Doc update

The IaC template mapping page now includes two additional authoring documentation links.

Incidents Reference

Doc update

The Defender for Cloud incidents reference page now includes two additional authoring documentation links.

Integrate Cloud Trail

Doc update

The Defender for Cloud Cloud Trail integration page now includes two additional authoring reference links.

Integration Faq

Doc update

The FAQ now uses revised DevRel ontology and authoring reference links.

Integration Power Bi

Doc update

Two authoring-document links on the Defender for Cloud Power BI integration page were re-saved with the same URLs.

Known Limitations

Doc update

The page’s DevRel ontology and authoring-documentation links were replaced with updated references.

Kubernetes Nodes Malware

Doc update

The page’s DevRel Offering Ontology reference was changed from one identifier URL to another.

Kubernetes Nodes Overview

Doc update

The Kubernetes nodes overview page now includes two additional Microsoft DevRel Offering Ontology links.

Manage Attack Path

Doc update

The attack path management article now includes two additional DevRel Offering Ontology links.

Manage Plans Defender Portal

Doc update

The page’s linked-reference list now retains two existing links and removes two authoring-document links.

Multicloud Support Matrix

Doc update

The multicloud support matrix now uses updated DevRel ontology and authoring metadata links.

Permissions Management

Doc update

The permissions management documentation now includes two additional reference links.

Privacy

Doc update

Two authoring-document links in the Defender for Cloud privacy page were replaced with new links.

Recommendations Reference Data

Doc update

Two authoring reference links in the Defender for Cloud recommendations reference document were replaced with two new links.

Release Notes Archive

Doc update

The archive documentation now includes two Microsoft DevRel Offering Ontology links.

Runtime Gated Overview

Doc update

Two authoring-reference entries on the runtime gated overview page were updated, with the same URLs retained.

Sensitive Info Types

Doc update

The Defender for Cloud sensitive information types page now uses updated authoring references, replacing previous links.

Serverless Protection

Doc update

The page’s DevRel offering ontology and authoring metadata links were updated.

Software Inventory

Doc update

The Defender for Cloud Software Inventory page now includes two additional DevRel Offering Ontology links.

Troubleshooting Guide

Doc update

The Defender for Cloud troubleshooting guide now includes two additional internal authoring links.

Troubleshooting Runtime Gated

Doc update

The Defender for Cloud runtime-gated troubleshooting page now includes two additional DevRel Offering Ontology links.

Zero Trust

Doc update

The Defender for Cloud zero trust article now includes two additional reference links.

Alerts Suppression Rules

Doc update

The Defender for Cloud alert suppression rules article no longer includes two internal authoring links.

Disable Plans

Doc update

The disable-plans page had two authoring-documentation links removed.

Export To Splunk Or Qradar

Doc update

The Splunk and QRadar export article no longer includes two internal authoring-document links.

On Upload Malware Scanning

Doc update

The documentation removed two internal authoring references from the on-upload malware scanning article.

35

Deploy Helm

Doc update

The page’s associated DevRel and ontology references were replaced with updated links.

Defender For Apis Deploy

Doc update

The page’s DevRel ontology and authoring metadata links were replaced with updated links.

Plan Defender For Servers

Doc update

Two DevRel ontology and authoring-documentation links were replaced with updated references.

Quickstart Onboard Aws

Doc update

Two DevRel ontology and authoring references were replaced with new URLs in the AWS onboarding page.

Quickstart Onboard Gcp

Doc update

The Defender for Cloud GCP onboarding quickstart now includes two additional authoring reference links.

Tutorial Enable Storage Plan

Doc update

The tutorial’s authoring reference links were revised, with two references removed and two retained.

Quickstart Onboard Gitlab

Doc update

The documentation removes two authoring-system links from the Defender for Cloud GitLab onboarding page.

10

Attack Path Api

Doc update

Two authoring-reference entries were rewritten, but their URLs remain unchanged.

Powershell Onboarding

Doc update

The Defender for Cloud PowerShell onboarding page now includes two DevRel ontology links.

Resource Graph Samples

Doc update

Two internal authoring links on the Defender for Cloud Resource Graph samples page were replaced with new references.

4
2

Alert Validation

Doc update

The alert validation page now includes two additional DevRel Offering Ontology links.

1
15

Monitor Site Security

Doc update

The Monitor site security article now includes two Microsoft DevRel Offering Ontology links.

Configure Permissions

Doc update

The Defender for IoT permissions page now includes two additional authoring reference links.

Set Up Rbac

Doc update

The Defender for IoT RBAC setup page now includes four additional reference links.

Device Discovery

Doc update

The device discovery page now includes two additional Microsoft DevRel ontology references.

Enterprise Iot

Doc update

The Enterprise IoT page now includes two Microsoft DevRel Offering Ontology links.

Enterprise Iot Manage

Doc update

The page’s DevRel Offering Ontology link was replaced with a different reference.

Index

Doc update

The index page now includes two Microsoft DevRel Offering Ontology links.

Investigate Threats

Doc update

The investigation documentation now includes two Microsoft DevRel Offering Ontology links.

Prerequisites

Doc update

The prerequisites page now includes two additional DevRel Offering Ontology links.

Set Up Sites

Doc update

The Defender for IoT site setup documentation now includes two additional DevRel Offering Ontology links.

Whats New

Doc update

The page now includes two Microsoft DevRel Offering Ontology links.

5

Get Started

Doc update

The get-started page now includes two additional DevRel Offering Ontology links.

License Overview

Doc update

The licensing overview now includes two Microsoft DevRel Offering Ontology links.

2

Monitor Sap System Health

Doc update

The SAP system health article now links to KQL queries for detecting incomplete collection windows and analyzing truncation markers, daily and projected monthly volume, hourly peaks, and high-volume accounts.

Deployment Overview

Doc update

The deployment overview now links to SAP tools on GitHub for sample scripts and utilities that automate onboarding, estimate source log sizes, and recover historical data.

2

Azure Storage Blob Connector Troubleshoot

Doc update

The troubleshooting page now consistently displays the full “Event Grid Storage Queue Data Message Sender assignment” label in the relevant error scenarios.

Sap Deploy Troubleshoot

Doc update

The troubleshooting guidance covers manually calling the Data Collector iFlow with the affected startTimeUTC and endTimeUTC values. This recovery is separate from automatic retries and requires the source logs to remain available.

19

Whats New

Public preview

Posture policies and recommendation exemptions are available in public preview for Azure environments. Administrators can evaluate Azure resources against the Microsoft Defender for Cloud baseline, create custom posture policies, and centrally manage accepted-risk exemptions with lifecycle tracking.

Ai Code Security Overview

Doc update

The overview’s DevRel offering ontology reference changed from one identifier URL to another.

Security Metrics

Doc update

The page’s DevRel offering ontology reference changed from one URI to another.

Run Ai Code Security Scans

Doc update

The documentation removed two internal authoring references from the AI code security scans article.

Defender Cli Authentication

Doc update

Four internal DevRel and ontology URLs were removed from the page. No other text changes are shown.

Classify Critical Assets

Doc update

Two DevRel ontology links were replaced with corresponding links on the microsoft-devrel.poolparty.biz domain.

Codename Mdash Faq

Doc update

The FAQ now references new DevRel ontology and authoring metadata links.

Critical Asset Management

Doc update

The Critical Asset Management page’s DevRel Offering Ontology link changed from one reference URL to another.

Defender Cli Cicd

Doc update

The page now includes two Microsoft DevRel Offering Ontology links.

Initiatives

Doc update

The page’s DevRelOfferingOntology references were updated in the documentation metadata.

Ot Data Connectors

Doc update

The documentation now includes two additional Microsoft DevRel Offering Ontology links.

Prerequisites

Doc update

Two DevRel/PoolParty reference URLs on the prerequisites page were replaced with new URLs. No prerequisite text changed.

Work Attack Paths Overview

Doc update

The work attack paths overview documentation replaced two DevRel ontology and authoring-reference URL pairs with new links.

Mdash Initiative

Doc update

The MDASH initiative page no longer includes two Microsoft DevRel Offering Ontology links.

Review Terminal Results

Doc update

The review terminal results documentation removed four internal authoring references.

13

Create Github Connector

Doc update

The GitHub connector article now includes four DevRel ontology and authoring-documentation links.

Wiz Data Connector

Doc update

The Wiz data connector article replaced six authoring references with four updated links.

Armis Data Connector

Doc update

The Armis data connector page now includes two additional authoring references.

Dragos Data Connector

Doc update

The Dragos data connector page now includes two additional authoring-documentation links.

Forescout Data Connector

Doc update

The Forescout data connector page replaced two linked authoring resources with new links.

Qualys Data Connector

Doc update

The Qualys data connector article replaces several internal DevRel and PoolParty metadata links with updated authoring references.

Rapid7 Data Connector

Doc update

The Rapid7 data connector documentation now includes two additional authoring references.

ServiceNow Data Connector

Doc update

The ServiceNow data connector page replaced four authoring-document links with updated references.

Tenable Data Connector

Doc update

The documentation replaced six existing reference URLs with two different URLs.

1
10

Threat And Vuln Mgt Event Timeline

Doc update

Two DevRel ontology references in the Defender Vulnerability Management event timeline now point to updated Microsoft DevRel URLs.

Tvm End Of Support Software

Doc update

The Defender Vulnerability Management end-of-support software article no longer includes four internal DevRel/authoring reference links.

Tvm Vulnerable Components

Doc update

The vulnerable components page no longer includes two Microsoft DevRel Offering Ontology links.

Tvm Prerequisites

Doc update

The page now includes two additional Microsoft DevRel Offering Ontology links.

Tvm Remediation

Doc update

The documentation diff updates two DevRel Offering Ontology reference entries; the URLs shown remain unchanged.

2

Tvm Exposure Score

Doc update

The TVM exposure score documentation removed four DevRel/PoolParty ontology links.

27

Mdb Security Privacy Compliance

Doc update

The Defender for Business security, privacy, and compliance article no longer contains two authoring-docs references.

Mdb Email Notifications

Doc update

The email notifications page now includes four DevRel Offering Ontology references.

Mdb Firewall

Doc update

Two authoring-document reference URLs were replaced with Microsoft DevRel Offering Ontology URLs.

Mdb Reports

Doc update

The page’s internal DevRel metadata links were replaced and reordered.

Mdb Roles Permissions

Doc update

The Defender for Business roles and permissions page replaces four ontology reference links with updated authoring-system links.

Mdb Asr

Doc update

Two internal reference links on the Microsoft Defender for Business attack surface reduction page were replaced.

Mdb Create Edit Device Groups

Doc update

The device groups article received a two-line refresh to its authoring-documentation references; the referenced URLs remain unchanged.

Mdb Manage Subscription

Doc update

Two authoring-system metadata links were removed while the two associated ontology links were retained.

Mdb Mtd

Doc update

The page now uses updated authoring-docs.microsoft.com ontology URLs for two references.

Mdb Partners

Doc update

Two links in the Microsoft Defender for Business partner documentation were changed to new Microsoft DevRel URLs.

Mdb Setup Configuration

Doc update

Two internal authoring-document links were removed from the setup configuration page; two existing links remain.

Mdb Troubleshooting

Doc update

The troubleshooting page’s DevRel ontology references were updated: two links were removed while two existing references remain.

Mdb View Tvm Dashboard

Doc update

Two authoring-document metadata links were removed; the two DevRelOfferingOntology links remain.

Index

Doc update

The Defender for Business index page no longer includes two internal authoring-document links.

Mdb Faq

Doc update

Four internal ontology and authoring links were removed from the FAQ page.

Mdb Overview

Doc update

The overview page no longer contains four listed authoring-document links.

Mdb Requirements

Doc update

The requirements documentation no longer includes four DevRel ontology and authoring references.

Mdb Tutorials

Doc update

The tutorials page no longer includes two internal authoring-document links.

Mdb Whats New

Doc update

The Defender for Business What's new page no longer includes four authoring-document links.

1

Mdb Onboard Devices

Doc update

Several associated DevRel ontology links were replaced with updated references.

1

Mdb Streaming Api

Doc update

The streaming API documentation now uses two updated Microsoft DevRel ontology URLs.