Week in brief

Advanced Hunting Take Action leads 3 Defender updates

Week of 29 June 2026 recorded 2 updated Microsoft Defender documentation changes and 1 relevant Message Center announcement. The most active areas were Defender XDR.

For Defender administrators

Review the linked Microsoft Learn changes that apply to your managed platforms, policies, applications, and rollout plans. The archive preserves the source diff for verification.

This period briefing was assembled from the tracked Microsoft Learn and Message Center changes.

Updates this week

2
1

Microsoft Defender: Automated investigation and response (AIR) integrated into antivirus with manual triggering removed

New

Starting September 1, 2026, Microsoft Defender will remove manual triggering and the standalone experience of automated investigation and response (AIR). AIR's protection is integrated into always-on antivirus, running automatically. Organizations using AIR in playbooks or scripts must update them before this date; full antivirus scans replace manual AIR investigations.

1 July 2026
Message CenterMC1411577 on mc.merill.net ↗Major updatePlan for change