Daily Defender News
A cross-product view of Microsoft Defender changes related to Incidents and response.
Microsoft Defender for Identity now includes a health alert for missing domain controller network traffic, helping administrators detect traffic collection issues affecting visibility. The alert appears in sensor health tabs, requires no pre-rollout action, and guides troubleshooting if triggered after rollout. No impact on end users or compliance.
Updated Microsoft Defender documentation in defender-xdr/alert-policies.md.
Updated Microsoft Defender documentation in defender-office-365/alert-policies-defender-portal.md.
Updated Microsoft Defender documentation in defender-endpoint/investigate-ip.md.
Updated Microsoft Defender documentation in defender-business/mdb-review-remediation-actions.md.
Updated Microsoft Defender documentation in defender-endpoint/information-protection-investigation.md.
Updated Microsoft Defender documentation in defender-endpoint/auto-investigation-action-center.md.
Added Microsoft Defender documentation in defender-xdr/defender-experts/defender-experts-hunting-graph-api.md.
Updated Microsoft Defender documentation in defender-xdr/alert-classification-password-spray-attack.md.
Updated Microsoft Defender documentation in defender-xdr/alert-grading-playbook-email-forwarding.md.
Updated Microsoft Defender documentation in defender-xdr/alert-grading-playbook-inbox-forwarding-rules.md.
Updated Microsoft Defender documentation in defender-xdr/alert-classification-playbooks.md.
Updated Microsoft Defender documentation in defender-xdr/alert-classification-suspicious-ip-password-spray.md.
Updated Microsoft Defender documentation in defender-xdr/alerts-incidents-correlation.md.
Updated Microsoft Defender documentation in defender-xdr/session-cookie-theft-alert.md.
Updated Microsoft Defender documentation in defender-xdr/alert-grading-playbook-inbox-manipulation-rules.md.
Updated Microsoft Defender documentation in defender-office-365/alert-policies-defender-portal.md.
Updated Microsoft Defender documentation in defender-xdr/api-incident.md.
Updated Microsoft Defender documentation in defender-xdr/configure-email-notifications.md.
Updated Microsoft Defender documentation in defender-xdr/security-copilot-m365d-create-incident-report.md.
Updated Microsoft Defender documentation in sentinel/create-tasks-automation-rule.md.
Updated Microsoft Defender documentation in defender-xdr/m365d-notifications-incidents.md.
Updated Microsoft Defender documentation in sentinel/manage-soc-with-incident-metrics.md.
Added Microsoft Defender documentation in unified-secops-platform/migrate-sentinel-incident-creation-rules-alert-grouping.md.
Updated Microsoft Defender documentation in defender-xdr/move-alert-to-another-incident.md.
Updated Microsoft Defender documentation in defender-xdr/m365d-action-center.md.
Updated Microsoft Defender documentation in unified-secops-platform/plan-incident-response.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in sentinel/sentinel-security-copilot-incident-summary.md.
Updated Microsoft Defender documentation in defender-xdr/security-copilot-m365d-incident-summary.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-alert.md.
Updated Microsoft Defender documentation in defender-xdr/m365d-autoir-actions.md.
Updated Microsoft Defender documentation in sentinel/security-alert-schema-differences.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-accelerate-alert-incident-response.md.
Updated Microsoft Defender documentation in defender-xdr/access-den-graph-api.md.
Updated Microsoft Defender documentation in defender-for-identity/advanced-settings.md.
Updated Microsoft Defender documentation in sentinel/automation/create-tasks-playbook.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-forward-alert-information-to-partners.md.
Updated Microsoft Defender documentation in defender-for-cloud-apps/flow-integration.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-link-to-incident.md.
Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-link-to-incident.md.
Updated Microsoft Defender documentation in sentinel/automation/migrate-playbooks-to-automation-rules.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-alert.md.
Updated Microsoft Defender documentation in sentinel/work-with-tasks.md.
Updated Microsoft Defender documentation in sentinel/create-incident-manually.md.
Updated Microsoft Defender documentation in sentinel/customize-alert-details.md.
Updated Microsoft Defender documentation in defender-endpoint/investigate-ip.md.
Updated Microsoft Defender documentation in defender-endpoint/information-protection-investigation.md.
Updated Microsoft Defender documentation in sentinel/incident-investigation.md.
Updated Microsoft Defender documentation in defender-xdr/alert-policies.md.
Updated Microsoft Defender documentation in defender-xdr/alert-policies.md.
Updated Microsoft Defender documentation in defender-for-cloud/quickstart-automation-alert.md.
Updated Microsoft Defender documentation in defender-for-cloud/episode-thirty-five.md.
Updated Microsoft Defender documentation in defender-endpoint/auto-investigation-action-center.md.
Updated Microsoft Defender documentation in defender-for-cloud/alert-validation.md.
Added Microsoft Defender documentation in defender-xdr/manually-create-incident.md.
Updated Microsoft Defender documentation in defender-for-cloud/quickstart-automation-alert.md.
Added Microsoft Defender documentation in defender-for-cloud/episode-thirty-five.md.
Added Microsoft Defender documentation in defender-xdr/sop-documentation-template.md.
Updated Microsoft Defender documentation in defender-business/mdb-review-remediation-actions.md.
Updated Microsoft Defender documentation in defender-xdr/session-cookie-theft-alert.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/alert-engine-messages.md.
Updated Microsoft Defender documentation in defender-xdr/alert-classification-suspicious-ip-password-spray.md.
Updated Microsoft Defender documentation in defender-xdr/alert-policies.md.
Updated Microsoft Defender documentation in defender-office-365/alert-policies-defender-portal.md.
Updated Microsoft Defender documentation in defender-endpoint/auto-investigation-action-center.md.
Updated Microsoft Defender documentation in defender-xdr/configure-email-notifications.md.
Updated Microsoft Defender documentation in defender-xdr/m365d-notifications-incidents.md.
Updated Microsoft Defender documentation in defender-xdr/m365d-action-center.md.
Updated Microsoft Defender documentation in defender-endpoint/information-protection-investigation.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/alert-engine-messages.md.
Updated Microsoft Defender documentation in defender-for-iot-azure/organizations/alert-engine-messages.md.
Updated Microsoft Defender documentation in sentinel/audit-track-tasks.md.
Updated Microsoft Defender documentation in sentinel/incident-navigate-triage.md.
Updated Microsoft Defender documentation in sentinel/collaborate-in-microsoft-teams.md.
Updated Microsoft Defender documentation in sentinel/automation/create-tasks-playbook.md.
Updated Microsoft Defender documentation in sentinel/create-tasks-automation-rule.md.
Updated Microsoft Defender documentation in sentinel/customize-alert-details.md.
Updated Microsoft Defender documentation in sentinel/tutorial-extract-incident-entities.md.
Updated Microsoft Defender documentation in sentinel/manage-soc-with-incident-metrics.md.
Updated Microsoft Defender documentation in sentinel/security-alert-schema-differences.md.
Updated Microsoft Defender documentation in sentinel/incident-investigation.md.
Updated Microsoft Defender documentation in sentinel/automation/migrate-playbooks-to-automation-rules.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-alert.md.
Updated Microsoft Defender documentation in sentinel/sentinel-security-copilot-incident-summary.md.
Updated Microsoft Defender documentation in sentinel/tutorial-enrich-ip-information.md.
Updated Microsoft Defender documentation in sentinel/work-with-tasks.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in sentinel/automate-incident-handling-with-automation-rules.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-alert.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-alert.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-alert.md.
Updated Microsoft Defender documentation in sentinel/normalization-schema-alert.md.
Removed Microsoft Defender documentation in defender-xdr/faq-incident-notifications-xdr.md.
Updated Microsoft Defender documentation in defender-xdr/alert-policies.md.
Added Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-accelerate-alert-incident-response.md.
Added Microsoft Defender documentation in defender-for-iot-azure/organizations/api/sensor-alert-apis.md.
Added Microsoft Defender documentation in defender-for-iot-azure/organizations/how-to-forward-alert-information-to-partners.md.
Added Microsoft Defender documentation in defender-for-iot-azure/organizations/alert-engine-messages.md.
Added Microsoft Defender documentation in defender-for-iot-azure/organizations/respond-ot-alert.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
Updated Microsoft Defender documentation in defender-xdr/security-alert-triage-agent.md.
