Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent-overview.md.

Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent-setup.md.

Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent-prerequisites.md.

Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent-management.md.

Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent-overview.md.

Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent-setup.md.

Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent-faq.md.

Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent-overview.md.

Added Microsoft Defender documentation in defender-xdr/alert-triage-agent-faq.md.

Added Microsoft Defender documentation in defender-xdr/alert-triage-agent-overview.md.

Added Microsoft Defender documentation in defender-xdr/alert-triage-agent-prerequisites.md.

Added Microsoft Defender documentation in defender-xdr/alert-triage-agent-management.md.

Added Microsoft Defender documentation in defender-xdr/alert-triage-agent-setup.md.

Added Microsoft Defender documentation in defender-xdr/alert-triage-agent-usage.md.

Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent-setup.md.

Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent.md.

Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent.md.

Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent.md.

Updated Microsoft Defender documentation in defender-xdr/alert-triage-agent-prerequisites.md.

Updated Microsoft Defender documentation in defender-xdr/okta-attack-disruption.md.

Updated Microsoft Defender documentation in defender-xdr/threat-intel-briefing-agent-defender.md.

Updated Microsoft Defender documentation in defender-xdr/okta-attack-disruption.md.

Updated Microsoft Defender documentation in defender-xdr/communicate-defender-experts-xdr.md.

Updated Microsoft Defender documentation in defender-xdr/faq-managed-response.md.

Updated Microsoft Defender documentation in defender-xdr/reports-xdr.md.

Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-entraidsigninevents-table.md.

Updated Microsoft Defender documentation in defender-xdr/threat-intel-briefing-agent-defender.md.

Updated Microsoft Defender documentation in defender-xdr/dex-xdr-overview.md.

Updated Microsoft Defender documentation in defender-xdr/get-started-xdr.md.

Microsoft Defender for Office 365 Plan 1 will enable users to report suspicious Teams messages as security risks or false positives starting late February 2026. Reports appear in the Defender portal, the feature is opt-in, and admins can configure settings to enhance phishing and malware detection in Teams.

Updated Microsoft Defender documentation in defender-xdr/streaming-api.md.

Starting March 2026, Microsoft Defender Antivirus with MDE security settings will stop storing readable exclusions in the local registry. Organizations must use PowerShell cmdlets like Get-MpPreference to retrieve settings. Registry-based monitoring will no longer work; update scripts and notify teams accordingly.

Updated Microsoft Defender documentation in defender-xdr/advanced-hunting-entraidsigninevents-table.md.

Updated Microsoft Defender documentation in defender-xdr/investigate-users.md.

Updated Microsoft Defender documentation in defender-xdr/troubleshoot.md.

Updated Microsoft Defender documentation in defender-endpoint/switch-to-mde-phase-2.md.

Updated Microsoft Defender documentation in defender-endpoint/controlled-folders.md.

Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-antivirus-compatibility.md.

Updated Microsoft Defender documentation in defender-endpoint/machines-view-overview.md.

Updated Microsoft Defender documentation in defender-endpoint/machine-tags.md.

Updated Microsoft Defender documentation in defender-endpoint/internet-facing-devices.md.

Updated Microsoft Defender documentation in defender-endpoint/targeting-devices.md.

Updated Microsoft Defender documentation in defender-endpoint/investigate-machines.md.

Updated Microsoft Defender documentation in defender-endpoint/create-custom-data-collection-rules.md.

Updated Microsoft Defender documentation in defender-endpoint/custom-data-collection.md.

Updated Microsoft Defender documentation in defender-endpoint/device-timeline-event-flag.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/devices-overview.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-antivirus-updates.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/linux-install-with-defender-deployment-tool.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/manage-device-scope-relevance.md.

Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-antivirus-updates.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/configure-libraries-live-response.md.

Updated Microsoft Defender documentation in defender-endpoint/configure-libraries-live-response.md.

Updated Microsoft Defender documentation in defender-endpoint/defender-deployment-tool-windows.md.

Updated Microsoft Defender documentation in defender-endpoint/configure-exclusions-microsoft-defender-antivirus.md.

Updated Microsoft Defender documentation in defender-endpoint/mac-whatsnew.md.

Updated Microsoft Defender documentation in defender-endpoint/deployment-vdi-microsoft-defender-antivirus.md.

Updated Microsoft Defender documentation in defender-endpoint/managing-exclusions.md.

Updated Microsoft Defender documentation in defender-endpoint/configure-exclusions-microsoft-defender-antivirus.md.

Updated Microsoft Defender documentation in defender-endpoint/mac-whatsnew.md.

Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-versions.md.

Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-versions.md.

Updated Microsoft Defender documentation in defender-endpoint/configure-libraries-live-response.md.

Updated Microsoft Defender documentation in defender-endpoint/configure-libraries-live-response.md.

Updated Microsoft Defender documentation in defender-endpoint/api/export-certificate-inventory-assessment.md.

Updated Microsoft Defender documentation in defender-endpoint/api/get-remediation-one-activity.md.

Updated Microsoft Defender documentation in defender-endpoint/api/add-a-new-scan-definition.md.

Updated Microsoft Defender documentation in defender-endpoint/schedule-anti-virus-scans-linux.md.

Updated Microsoft Defender documentation in defender-endpoint/api/get-live-response-result.md.

Updated Microsoft Defender documentation in defender-endpoint/api/get-remediation-exposed-devices-activities.md.

Updated Microsoft Defender documentation in defender-endpoint/microsoft-defender-endpoint-versions.md.

Updated Microsoft Defender documentation in defender-endpoint/configure-libraries-live-response.md.

Updated Microsoft Defender documentation in defender-endpoint/troubleshoot-av-performance-issues-with-wprui.md.

Updated Microsoft Defender documentation in defender-endpoint/troubleshoot-settings.md.

Updated Microsoft Defender documentation in defender-endpoint/mac-troubleshoot-mode.md.

Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-reference.md.

Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-reference.md.

Updated Microsoft Defender documentation in defender-endpoint/attack-surface-reduction-rules-reference.md.

Updated Microsoft Defender documentation in defender-endpoint/api/cancel-machine-action.md.

Updated Microsoft Defender documentation in defender-endpoint/api/get-machineaction-object.md.

Removed Microsoft Defender documentation in defender-endpoint/onboard-client.md.

Updated Microsoft Defender documentation in defender-office-365/quarantine-about.md.

Updated Microsoft Defender documentation in defender-office-365/quarantine-quarantine-notifications.md.

Updated Microsoft Defender documentation in defender-office-365/secure-by-default.md.

Updated Microsoft Defender documentation in defender-office-365/zero-hour-auto-purge.md.

Updated Microsoft Defender documentation in defender-office-365/anti-malware-policies-configure.md.

Updated Microsoft Defender documentation in defender-office-365/anti-spam-policies-configure.md.

Updated Microsoft Defender documentation in defender-office-365/anti-spam-protection-about.md.

Updated Microsoft Defender documentation in defender-office-365/email-authentication-arc-configure.md.

Updated Microsoft Defender documentation in defender-office-365/scc-permissions.md.

Updated Microsoft Defender documentation in defender-office-365/eop-about.md.

Updated Microsoft Defender documentation in defender-office-365/external-senders-policies-practices-guidelines.md.

Updated Microsoft Defender documentation in defender-office-365/safe-links-about.md.

Added Microsoft Defender documentation in defender-for-identity/connect-cyberark.md.

Added Microsoft Defender documentation in defender-for-identity/defender-for-identity-cyberark-overview.md.

Updated Microsoft Defender documentation in defender-for-identity/connect-cyberark.md.

Updated Microsoft Defender documentation in defender-for-identity/connect-cyberark.md.

Updated Microsoft Defender documentation in defender-for-identity/connect-cyberark.md.

Updated Microsoft Defender documentation in defender-for-identity/defender-for-identity-cyberark-overview.md.

Updated Microsoft Defender documentation in defender-for-identity/connect-cyberark.md.

Updated Microsoft Defender documentation in defender-for-identity/defender-for-identity-cyberark-overview.md.

Updated Microsoft Defender documentation in defender-for-identity/connect-cyberark.md.

Updated Microsoft Defender documentation in defender-for-identity/connect-cyberark.md.

Updated Microsoft Defender documentation in defender-for-identity/connect-cyberark.md.

Updated Microsoft Defender documentation in defender-for-identity/connect-cyberark.md.

Updated Microsoft Defender documentation in defender-for-identity/defender-for-identity-cyberark-overview.md.

Updated Microsoft Defender documentation in defender-for-identity/whats-new-archive.md.

Updated Microsoft Defender documentation in defender-for-identity/deploy/configure-windows-event-collection.md.

Updated Microsoft Defender documentation in defender-for-identity/what-is.md.

Updated Microsoft Defender documentation in defender-for-identity/health-alerts.md.

Updated Microsoft Defender documentation in defender-for-identity/deploy/prerequisites-sensor-version-3.md.

Updated Microsoft Defender documentation in defender-for-identity/health-alerts.md.

Updated Microsoft Defender documentation in defender-for-identity/health-alerts.md.

Updated Microsoft Defender documentation in defender-for-identity/health-alerts.md.

Updated Microsoft Defender documentation in defender-for-identity/deploy/prerequisites-sensor-version-2.md.

Updated Microsoft Defender documentation in defender-for-identity/whats-new.md.

Updated Microsoft Defender documentation in defender-for-identity/troubleshooting-known-issues.md.

Updated Microsoft Defender documentation in defender-for-identity/whats-new-archive.md.

Updated Microsoft Defender documentation in defender-for-identity/deploy/deploy-defender-identity.md.

Removed Microsoft Defender documentation in defender-for-identity/architecture.md.

Updated Microsoft Defender documentation in defender-for-cloud-apps/access-policy-aad.md.

Updated Microsoft Defender documentation in defender-for-cloud-apps/anomaly-detection-policy.md.

Updated Microsoft Defender documentation in defender-for-cloud-apps/cloud-discovery-policies.md.

Updated Microsoft Defender documentation in defender-for-cloud-apps/data-protection-policies.md.

Updated Microsoft Defender documentation in defender-for-cloud-apps/enable-instant-visibility-protection-and-governance-actions-for-your-apps.md.

Updated Microsoft Defender documentation in defender-for-cloud-apps/flow-integration.md.

Updated Microsoft Defender documentation in defender-for-cloud-apps/session-policy-aad.md.

Removed Microsoft Defender documentation in defender-for-cloud-apps/webinars.md.

Updated Microsoft Defender documentation in defender-for-cloud-apps/tutorial-suspicious-activity.md.

Updated Microsoft Defender documentation in defender-for-cloud-apps/tutorial-suspicious-activity.md.

Updated Microsoft Defender documentation in defender-for-cloud-apps/tutorial-suspicious-activity.md.

Updated Microsoft Defender documentation in defender-for-cloud-apps/tutorial-suspicious-activity.md.

Updated Microsoft Defender documentation in defender-for-cloud-apps/get-started.md.

Updated Microsoft Defender documentation in defender-for-cloud-apps/app-governance-trial-user-guide.md.

Updated Microsoft Defender documentation in defender-for-cloud-apps/siem-sentinel.md.

Updated Microsoft Defender documentation in defender-for-cloud-apps/release-note-archive.md.

Updated Microsoft Defender documentation in defender-for-cloud-apps/release-notes.md.

Updated Microsoft Defender documentation in exposure-management/ServiceNow-data-connector.md.

Updated Microsoft Defender documentation in exposure-management/Qualys-data-connector.md.

Updated Microsoft Defender documentation in exposure-management/wiz-data-connector.md.

Updated Microsoft Defender documentation in exposure-management/initiatives.md.

Updated Microsoft Defender documentation in unified-secops-platform/overview-msem-strategy.md.

Updated Microsoft Defender documentation in unified-secops-platform/playbook-managed-security.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-dashboard.md.

Updated Microsoft Defender documentation in unified-secops-platform/playbook-managed-security.md.

Updated Microsoft Defender documentation in unified-secops-platform/overview-msem-strategy.md.

Updated Microsoft Defender documentation in unified-secops-platform/reduce-risk-overview.md.

Updated Microsoft Defender documentation in unified-secops-platform/reduce-risk-overview.md.

Updated Microsoft Defender documentation in unified-secops-platform/cases-overview.md.

Updated Microsoft Defender documentation in unified-secops-platform/cases-overview.md.

Updated Microsoft Defender documentation in unified-secops-platform/playbook-managed-security.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-dashboard.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-dashboard.md.

Updated Microsoft Defender documentation in unified-secops-platform/overview-unified-security.md.

Updated Microsoft Defender documentation in unified-secops-platform/overview-unified-security.md.

Updated Microsoft Defender documentation in unified-secops-platform/whats-new.md.

Updated Microsoft Defender documentation in unified-secops-platform/whats-new.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-tenant-devices.md.

Updated Microsoft Defender documentation in unified-secops-platform/gov-support.md.

Updated Microsoft Defender documentation in unified-secops-platform/microsoft-threat-actor-naming.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-tenants.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-overview.md.

Updated Microsoft Defender documentation in unified-secops-platform/microsoft-threat-actor-naming.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-cross-cloud.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-distribution-profiles.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-workbooks.md.

Updated Microsoft Defender documentation in unified-secops-platform/multitenant-identities-inventory.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-requirements.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-incidents-alerts.md.

Updated Microsoft Defender documentation in unified-secops-platform/zero-trust.md.

Updated Microsoft Defender documentation in unified-secops-platform/gov-support.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-cross-cloud.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-workbooks.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-cross-cloud.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-requirements.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-urbac.md.

Updated Microsoft Defender documentation in unified-secops-platform/respond-threats-overview.md.

Updated Microsoft Defender documentation in unified-secops-platform/threat-intelligence-overview.md.

Updated Microsoft Defender documentation in unified-secops-platform/zero-trust.md.

Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-distribution-profiles.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-tenant-devices.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-tenant-devices.md.

Updated Microsoft Defender documentation in unified-secops-platform/gov-support.md.

Updated Microsoft Defender documentation in unified-secops-platform/criteria.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-tenants.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-tenants.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-urbac.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-overview.md.

Updated Microsoft Defender documentation in unified-secops-platform/defender-xdr-portal.md.

Updated Microsoft Defender documentation in unified-secops-platform/defender-xdr-portal.md.

Updated Microsoft Defender documentation in unified-secops-platform/microsoft-threat-actor-naming.md.

Updated Microsoft Defender documentation in unified-secops-platform/multitenant-identities-inventory.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-requirements.md.

Updated Microsoft Defender documentation in unified-secops-platform/submission-guide.md.

Updated Microsoft Defender documentation in unified-secops-platform/detect-threats-overview.md.

Updated Microsoft Defender documentation in unified-secops-platform/detect-threats-overview.md.

Updated Microsoft Defender documentation in unified-secops-platform/respond-threats-overview.md.

Updated Microsoft Defender documentation in unified-secops-platform/threat-intelligence-overview.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-manage-cases.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-manage-cases.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-incidents-alerts.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-incidents-alerts.md.

Updated Microsoft Defender documentation in unified-secops-platform/zero-trust.md.

Updated Microsoft Defender documentation in unified-secops-platform/overview-deploy.md.

Updated Microsoft Defender documentation in unified-secops-platform/overview-plan.md.

Updated Microsoft Defender documentation in unified-secops-platform/overview-deploy.md.

Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.

Updated Microsoft Defender documentation in unified-secops-platform/overview-plan.md.

Updated Microsoft Defender documentation in unified-secops-platform/overview-deploy.md.

Updated Microsoft Defender documentation in unified-secops-platform/microsoft-sentinel-onboard.md.

Updated Microsoft Defender documentation in unified-secops-platform/overview-plan.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-endpoint-security-policy.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-endpoint-security-policy.md.

Updated Microsoft Defender documentation in unified-secops-platform/virus-initiative-criteria.md.

Updated Microsoft Defender documentation in unified-secops-platform/malware-naming.md.

Updated Microsoft Defender documentation in unified-secops-platform/cases-overview.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-overview.md.

Updated Microsoft Defender documentation in unified-secops-platform/overview-defender-portal.md.

Updated Microsoft Defender documentation in unified-secops-platform/overview-defender-portal.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-advanced-hunting.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-advanced-hunting.md.

Updated Microsoft Defender documentation in unified-secops-platform/hunting-overview.md.

Updated Microsoft Defender documentation in unified-secops-platform/hunting-overview.md.

Updated Microsoft Defender documentation in unified-secops-platform/plan-incident-response.md.

Updated Microsoft Defender documentation in unified-secops-platform/plan-incident-response.md.

Updated Microsoft Defender documentation in unified-secops-platform/plan-incident-response.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-troubleshoot.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-troubleshoot.md.

Updated Microsoft Defender documentation in unified-secops-platform/mto-troubleshoot.md.

Updated Microsoft Defender documentation in unified-secops-platform/multitenant-identities-inventory.md.

Updated Microsoft Defender documentation in defender/threat-intelligence/security-copilot-and-defender-threat-intelligence.md.

Updated Microsoft Defender documentation in defender/threat-intelligence/gathering-vulnerability-intelligence.md.

Updated Microsoft Defender documentation in defender/threat-intelligence/analyst-insights.md.

Updated Microsoft Defender documentation in defender/threat-intelligence/data-sets.md.

Updated Microsoft Defender documentation in defender/threat-intelligence/reputation-scoring.md.

Updated Microsoft Defender documentation in defender/threat-intelligence/infrastructure-chaining.md.

Updated Microsoft Defender documentation in defender/threat-intelligence/learn-how-to-access-microsoft-defender-threat-intelligence-and-make-customizations-in-your-portal.md.

Updated Microsoft Defender documentation in defender/threat-intelligence/searching-and-pivoting.md.

Updated Microsoft Defender documentation in defender/threat-intelligence/sorting-filtering-and-downloading-data.md.

Updated Microsoft Defender documentation in defender/threat-intelligence/gathering-threat-intelligence-and-infrastructure-chaining.md.

Updated Microsoft Defender documentation in defender/threat-intelligence/using-copilot-threat-intelligence-defender-xdr.md.

Updated Microsoft Defender documentation in defender/threat-intelligence/using-projects.md.

Updated Microsoft Defender documentation in defender/threat-intelligence/using-tags.md.

Updated Microsoft Defender documentation in defender/threat-intelligence/what-is-microsoft-defender-threat-intelligence-defender-ti.md.