How Microsoft names threat actors
General
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-threat-actor-naming.md.
Product
Microsoft Unified SecOps Platform
Track documentation and Message Center changes for Microsoft Unified SecOps Platform.
Microsoft Learn documentation ↗Latest Microsoft Unified SecOps Platform changes
Mto Endpoint Security Policy
Endpoint protection
Updated Microsoft Defender documentation in unified-secops-platform/mto-endpoint-security-policy.md.
Submission Guide
Endpoint protection
Updated Microsoft Defender documentation in unified-secops-platform/submission-guide.md.
Configure delegated access with governance relationships for multitenant organizations (preview)
General
Updated Microsoft Defender documentation in unified-secops-platform/governance-relationships.md.
Connect Microsoft Sentinel to the Microsoft Defender portal
General
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
Create and manage tenant groups in Microsoft Defender multitenant management
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-tenant-groups.md.
Deploy
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/overview-deploy.md.
Endpoint security policies in multitenant management
Endpoint protection
Updated Microsoft Defender documentation in unified-secops-platform/mto-endpoint-security-policy.md.
Manage tenants in other Microsoft cloud environments
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-cross-cloud.md.
Manage unified role-based access control in multitenant management
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-urbac.md.
Migrate Microsoft Sentinel incident creation rules to alert grouping in Microsoft Defender
Incidents and response
Added Microsoft Defender documentation in unified-secops-platform/migrate-sentinel-incident-creation-rules-alert-grouping.md.
Plan an incident response workflow in the Microsoft Defender portal
Incidents and response
Updated Microsoft Defender documentation in unified-secops-platform/plan-incident-response.md.
Reduce Risk Overview
Vulnerabilities and exposure
Updated Microsoft Defender documentation in unified-secops-platform/reduce-risk-overview.md.
Set up Microsoft Defender multitenant management
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-requirements.md.
Use Microsoft Sentinel situational awareness workbooks in multitenant management
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-workbooks.md.
View and manage incidents and alerts in Microsoft Defender multitenant management
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-incidents-alerts.md.
Connect Microsoft Sentinel to the Microsoft Defender portal
General
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
How Microsoft names threat actors
General
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-threat-actor-naming.md.
Microsoft Sentinel Onboard
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
Create and manage tenant groups in Microsoft Defender multitenant management
General
Added Microsoft Defender documentation in unified-secops-platform/mto-tenant-groups.md.
Mto Overview
Fundamentals
Updated Microsoft Defender documentation in unified-secops-platform/mto-overview.md.
Mto Overview
Fundamentals
Updated Microsoft Defender documentation in unified-secops-platform/mto-overview.md.
Mto Tenant Groups
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-tenant-groups.md.
Mto Tenant Groups
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-tenant-groups.md.
Mto Tenant Groups
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-tenant-groups.md.
Mto Tenant Groups
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-tenant-groups.md.
Mto Tenant Groups
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-tenant-groups.md.
Mto Distribution Profiles
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-distribution-profiles.md.
How Microsoft names threat actors
General
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-threat-actor-naming.md.
Advanced hunting in Microsoft Defender multitenant management
Hunting and detection
Updated Microsoft Defender documentation in unified-secops-platform/mto-advanced-hunting.md.
Content distribution in multitenant management
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-distribution-profiles.md.
customer intent: As a business decision maker for a security operations center, I want to learn about the case management tools available in the Micr…
General
Updated Microsoft Defender documentation in unified-secops-platform/cases-overview.md.
customer intent: As a security operations center business decision maker, I want to learn about the tools available to detect threats in Microsoft's…
General
Updated Microsoft Defender documentation in unified-secops-platform/detect-threats-overview.md.
Customer intent: As a security operations center business decision maker, I want to learn about the tools available to respond to threats automatical…
General
Updated Microsoft Defender documentation in unified-secops-platform/respond-threats-overview.md.
customer intent: As a security operations center leader, I want to learn about the services and features available in the Defender portal to help me…
General
Updated Microsoft Defender documentation in unified-secops-platform/overview-defender-portal.md.
customer intent: As a security operations center leader, I want to learn about the services and features available in the Microsoft Defender portal f…
General
Updated Microsoft Defender documentation in unified-secops-platform/overview-unified-security.md.
customer intent: To learn how to create, delete, import, and edit roles in the unified role-based access control in Microsoft Defender multitenant ma…
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-urbac.md.
Endpoint security policies in multitenant management
Endpoint protection
Updated Microsoft Defender documentation in unified-secops-platform/mto-endpoint-security-policy.md.
Identities
General
Updated Microsoft Defender documentation in unified-secops-platform/multitenant-identities-inventory.md.
View and manage incidents and alerts in Microsoft Defender multitenant management
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-incidents-alerts.md.
What's new for Microsoft unified security operations
General
Updated Microsoft Defender documentation in unified-secops-platform/whats-new.md.
Playbook Mssps
General
Removed Microsoft Defender documentation in unified-secops-platform/playbook-mssps.md.
Microsoft Sentinel Onboard
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
Microsoft Sentinel Onboard
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
Microsoft Sentinel Onboard
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
Microsoft Sentinel Onboard
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
Defender Portal
General
Updated Microsoft Defender documentation in unified-secops-platform/overview-defender-portal.md.
Connect Microsoft Sentinel to the Microsoft Defender portal
General
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
Microsoft Sentinel Onboard
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
Microsoft Sentinel Onboard
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
Microsoft Sentinel Onboard
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
Microsoft Sentinel Onboard
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
Microsoft Sentinel Onboard
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
Plan
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/overview-plan.md.
Governance Relationships
Identity protection
Updated Microsoft Defender documentation in unified-secops-platform/governance-relationships.md.
Governance Relationships
Identity protection
Updated Microsoft Defender documentation in unified-secops-platform/governance-relationships.md.
Governance Relationships
General
Updated Microsoft Defender documentation in unified-secops-platform/governance-relationships.md.
Governance Relationships
Identity protection
Updated Microsoft Defender documentation in unified-secops-platform/governance-relationships.md.
Governance Relationships
Identity protection
Updated Microsoft Defender documentation in unified-secops-platform/governance-relationships.md.
Mto Workbooks
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-workbooks.md.
Microsoft Threat Actor Naming
General
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-threat-actor-naming.md.
Configure delegated access with governance relationships for multitenant organizations
General
Added Microsoft Defender documentation in unified-secops-platform/governance-relationships.md.
Configure delegated access with governance relationships for multitenant organizations
General
Updated Microsoft Defender documentation in unified-secops-platform/governance-relationships.md.
Gov Support
General
Updated Microsoft Defender documentation in unified-secops-platform/gov-support.md.
Governance Relationships
General
Updated Microsoft Defender documentation in unified-secops-platform/governance-relationships.md.
Gov Support
General
Updated Microsoft Defender documentation in unified-secops-platform/gov-support.md.
Gov Support
General
Updated Microsoft Defender documentation in unified-secops-platform/gov-support.md.
Microsoft Threat Actor Naming
General
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-threat-actor-naming.md.
How Microsoft names threat actors
General
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-threat-actor-naming.md.
Connect Microsoft Sentinel to the Microsoft Defender portal
General
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
Deploy
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/overview-deploy.md.
Gov Support
General
Updated Microsoft Defender documentation in unified-secops-platform/gov-support.md.
Manage security operations cases natively in the Microsoft Defender portal
General
Updated Microsoft Defender documentation in unified-secops-platform/cases-overview.md.
Manage tenants in other Microsoft cloud environments
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-cross-cloud.md.
Microsoft Threat Actor Naming
General
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-threat-actor-naming.md.
Mto Distribution Profiles
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-distribution-profiles.md.
Mto Endpoint Security Policy
Endpoint protection
Updated Microsoft Defender documentation in unified-secops-platform/mto-endpoint-security-policy.md.
Mto Overview
Fundamentals
Updated Microsoft Defender documentation in unified-secops-platform/mto-overview.md.
Mto Requirements
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-requirements.md.
Multitenant Identities Inventory
Identity protection
Updated Microsoft Defender documentation in unified-secops-platform/multitenant-identities-inventory.md.
Plan
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/overview-plan.md.
Plan an incident response workflow in the Microsoft Defender portal
Incidents and response
Updated Microsoft Defender documentation in unified-secops-platform/plan-incident-response.md.
Playbook Managed Security
General
Updated Microsoft Defender documentation in unified-secops-platform/playbook-managed-security.md.
Respond Threats Overview
Fundamentals
Updated Microsoft Defender documentation in unified-secops-platform/respond-threats-overview.md.
Mto Workbooks
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-workbooks.md.
Mto Workbooks
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-workbooks.md.
Defender Portal
General
Updated Microsoft Defender documentation in unified-secops-platform/overview-defender-portal.md.
Microsoft Sentinel Onboard
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
Mto Workbooks
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-workbooks.md.
Mto Workbooks
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-workbooks.md.
Workbooks in multitenant management
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-workbooks.md.
Manage security operations cases natively in the Microsoft Defender portal
General
Updated Microsoft Defender documentation in unified-secops-platform/cases-overview.md.
Manage tenants in other Microsoft cloud environments
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-cross-cloud.md.
Multitenant Identities Inventory
General
Updated Microsoft Defender documentation in unified-secops-platform/multitenant-identities-inventory.md.
Plan an incident response workflow in the Microsoft Defender portal
Incidents and response
Updated Microsoft Defender documentation in unified-secops-platform/plan-incident-response.md.
Microsoft Sentinel Onboard
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
How Microsoft names threat actors
General
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-threat-actor-naming.md.
Manage security operations cases natively in the Microsoft Defender portal
General
Updated Microsoft Defender documentation in unified-secops-platform/cases-overview.md.
Mto Distribution Profiles
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-distribution-profiles.md.
Advanced hunting in Microsoft Defender multitenant management
Hunting and detection
Updated Microsoft Defender documentation in unified-secops-platform/mto-advanced-hunting.md.
Advanced hunting in Microsoft Defender multitenant management
Hunting and detection
Updated Microsoft Defender documentation in unified-secops-platform/mto-advanced-hunting.md.
Cases Overview
Fundamentals
Updated Microsoft Defender documentation in unified-secops-platform/cases-overview.md.
Connect Microsoft Sentinel to the Microsoft Defender portal
General
Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.
Content distribution using distribution profiles in multitenant management
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-distribution-profiles.md.
Deploy
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/overview-deploy.md.
Deploy
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/overview-deploy.md.
Deploy
Architecture and deployment
Updated Microsoft Defender documentation in unified-secops-platform/overview-deploy.md.
Devices in multitenant management
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-tenant-devices.md.
Devices in multitenant management
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-tenant-devices.md.
Devices in multitenant management
General
Updated Microsoft Defender documentation in unified-secops-platform/mto-tenant-devices.md.
Endpoint security policies in multitenant management
Endpoint protection
Updated Microsoft Defender documentation in unified-secops-platform/mto-endpoint-security-policy.md.
Enhancing your organization's security posture
General
Updated Microsoft Defender documentation in unified-secops-platform/overview-msem-strategy.md.
Enhancing your organization's security posture
General
Updated Microsoft Defender documentation in unified-secops-platform/overview-msem-strategy.md.
Gov Support
General
Updated Microsoft Defender documentation in unified-secops-platform/gov-support.md.
Gov Support
General
Updated Microsoft Defender documentation in unified-secops-platform/gov-support.md.
Gov Support
General
Updated Microsoft Defender documentation in unified-secops-platform/gov-support.md.
How Microsoft identifies malware and potentially unwanted applications
General
Updated Microsoft Defender documentation in unified-secops-platform/criteria.md.