Cases Overview
The documentation now states that MDTI projects are deprecated and directs users to link threat indicators to cases in the Microsoft Defender portal.
Daily Defender NewsA cross-product view of Microsoft Defender changes related to Fundamentals.
The documentation now states that MDTI projects are deprecated and directs users to link threat indicators to cases in the Microsoft Defender portal.
The overview now states that Plan 2 extends expert triage and investigation to supported third-party sources ingested through Microsoft Sentinel, in addition to Microsoft Defender workloads.
The page’s `ms.custom` metadata changed from `msecd-doc-authoring-1013` to `msecd-doc-authoring-1016`.
The page now tells administrators to assign obtained licenses to specific users before using them. It also clarifies that the device count refers to identified unique devices; metadata was updated.
The article now explains how to switch to and from the Security Analyst Agent through the More actions menu, notes that switching resets the conversation, adds a Sentinel Log Analytics investigation prompt, and reorganizes report interpretation guidance.
The page now uses relative paths for its screenshots, updates terminology and the Microsoft Threat Intelligence link, and replaces two related links with a Threat analytics link in Microsoft Defender XDR.
The page now explains that Plan 1 covers Microsoft Defender workloads, while Plan 2 includes Plan 1 and extends expert-led detection, investigation, response, and threat hunting to selected non-Microsoft telemetry collected in Microsoft Sentinel.
The Defender TI overview documentation was deleted. Its content stated that Defender TI will be discontinued and merged into Microsoft Defender, with existing customers retaining access until August 1, 2026.
Updated Microsoft Defender documentation in defender-xdr/custom-detections-overview.md.
Updated Microsoft Defender documentation in easm/inventory-filters.md.
Removed Microsoft Defender documentation in defender-xdr/dex-servers-overview.md.
Removed Microsoft Defender documentation in defender-xdr/dex-xdr-overview.md.
Removed Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-servers-get-started.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-mdr-get-started.md.
Updated Microsoft Defender documentation in defender-for-iot/get-started.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/getting-started.md.
Removed Microsoft Defender documentation in defender-xdr/get-started-xdr.md.
Updated Microsoft Defender documentation in defender-xdr/incidents-overview.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-servers-overview.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-overview.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/license-and-trial-license-extention.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-mdr-overview.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-mdr-third-party-enrichment.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Updated Microsoft Defender documentation in defender-for-iot/enterprise-iot-get-started.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Updated Microsoft Defender documentation in defender-xdr/dex-servers-overview.md.
Updated Microsoft Defender documentation in unified-secops-platform/mto-overview.md.
Updated Microsoft Defender documentation in unified-secops-platform/mto-overview.md.
Updated Microsoft Defender documentation in defender-xdr/dex-servers-overview.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Updated Microsoft Defender documentation in defender-xdr/custom-detections-overview.md.
Updated Microsoft Defender documentation in defender-for-iot/get-started.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-xdr.md.
Updated Microsoft Defender documentation in defender-xdr/dex-servers-overview.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Updated Microsoft Defender documentation in easm/inventory-filters.md.
Updated Microsoft Defender documentation in defender-xdr/dex-servers-overview.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-xdr.md.
Added Microsoft Defender documentation in defender-for-iot-azure/device-builders/concept-agent-portfolio-overview-os-support.md.
Added Microsoft Defender documentation in defender-for-iot-azure/device-builders/iot-security-threadx.md.
Added Microsoft Defender documentation in defender-for-iot-azure/organizations/getting-started.md.
Added Microsoft Defender documentation in defender-for-iot-azure/organizations/license-and-trial-license-extention.md.
Added Microsoft Defender documentation in defender-for-iot-azure/device-builders/concept-standalone-micro-agent-overview.md.
Added Microsoft Defender documentation in defender-for-iot-azure/organizations/traffic-mirroring/traffic-mirroring-overview.md.
Added Microsoft Defender documentation in defender-for-iot-azure/device-builders/overview.md.
Added Microsoft Defender documentation in easm/inventory-filters.md.
Updated Microsoft Defender documentation in defender-xdr/dex-servers-overview.md.
Updated Microsoft Defender documentation in defender-xdr/dex-xdr-overview.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-dex-servers.md.
Updated Microsoft Defender documentation in defender-xdr/dex-xdr-overview.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-xdr.md.
Added Microsoft Defender documentation in defender-xdr/dex-servers-overview.md.
Updated Microsoft Defender documentation in defender-xdr/dex-servers-overview.md.
Updated Microsoft Defender documentation in defender-xdr/dex-xdr-overview.md.
Updated Microsoft Defender documentation in defender-xdr/get-started.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-xdr.md.
Updated Microsoft Defender documentation in unified-secops-platform/mto-overview.md.
Updated Microsoft Defender documentation in defender-xdr/custom-detections-overview.md.
Updated Microsoft Defender documentation in defender-xdr/api-overview.md.
Updated Microsoft Defender documentation in unified-secops-platform/respond-threats-overview.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-exception-overview.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-xdr.md.
Updated Microsoft Defender documentation in defender-xdr/custom-detections-overview.md.
Updated Microsoft Defender documentation in defender-xdr/dex-xdr-overview.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-xdr.md.
Updated Microsoft Defender documentation in defender-xdr/incidents-overview.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-exception-overview.md.
Updated Microsoft Defender documentation in defender-xdr/microsoft-365-defender.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-xdr.md.
Updated Microsoft Defender documentation in defender-for-iot/get-started.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-xdr.md.
Updated Microsoft Defender documentation in defender-xdr/dex-xdr-overview.md.
Updated Microsoft Defender documentation in defender-xdr/dex-xdr-overview.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-xdr.md.
Updated Microsoft Defender documentation in defender-xdr/dex-xdr-overview.md.
Updated Microsoft Defender documentation in defender-xdr/get-started-xdr.md.
Updated Microsoft Defender documentation in unified-secops-platform/cases-overview.md.
Updated Microsoft Defender documentation in unified-secops-platform/overview-defender-portal.md.
Updated Microsoft Defender documentation in unified-secops-platform/overview-defender-portal.md.
Updated Microsoft Defender documentation in unified-secops-platform/mto-overview.md.
Updated Microsoft Defender documentation in defender/threat-intelligence/what-is-microsoft-defender-threat-intelligence-defender-ti.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-exception-overview.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-exception-overview.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-exception-overview.md.
Updated Microsoft Defender documentation in unified-secops-platform/cases-overview.md.
Updated Microsoft Defender documentation in defender-vulnerability-management/tvm-exception-overview.md.