🚀🚀 Weekly Microsoft Security Update -March 20, 2026 🚀🚀 скачать в хорошем качестве

🚀🚀 Weekly Microsoft Security Update -March 20, 2026 🚀🚀

00:00-Introduction 00:33-Defender XDR: MDE and XDR APIs retiring - migrate to Microsoft Graph Security API 02:29-Defender XDR: Built-in Alert Tuning Rules optimize incident and alert queues 04:07-Defender XDR: AI-powered incident prioritization 06:21-Defender XDR: Report a suspicious call 08:06-Defender XDR: Built-in Alert Tuning Rules with Set as Behavior alert tuning action 10:03-Thank You 1) Microsoft is retiring the Defender for Endpoint (MDE) and Defender XDR APIs and moving customers to the Microsoft Graph Security API. This shift provides a single, unified API across Defender products with broader data coverage, consistent schemas, and improved scalability—making security automation and integrations simpler and more powerful going forward Reference a. https://learn.microsoft.com/en-us/gra... b. https://learn.microsoft.com/en-us/gra... 2) Microsoft Defender XDR now includes built‑in alert tuning rules to help optimize incident and alert queues. The initial release focuses on low‑severity Microsoft Defender for Office 365 alerts, using automated triage to reduce noise while ensuring alerts are automatically reopened if further investigation is needed. This helps SOC teams stay focused on what matters most. Reference a. https://aka.ms/built-in-tuning-rules 3) Microsoft Defender XDR now includes AI‑powered incident prioritization in the incident queue. Each incident is assigned a priority score from 0–100, with clear explanations of the key factors behind the ranking, helping SOC teams quickly focus on the incidents that matter most and triage with greater confidence. Reference a. https://techcommunity.microsoft.com/b... 4) Microsoft Defender XDR introduces “Report a Call” for Microsoft Teams, allowing users to flag suspicious one‑to‑one calls directly from call history. Reports share limited call metadata with organizations and Microsoft, and are viewable in the Microsoft Defender portal or Teams Admin Center. The feature is enabled by default and can be controlled or disabled by admins, helping improve visibility into voice‑based threats Reference a. https://www.microsoft.com/en-US/micro... 5) Private Preview: Microsoft Defender XDR introduces new built‑in alert tuning rules with a “Set as Behavior” alert tuning action. This release adds 6 new built‑in rules targeting informational and low‑severity Microsoft Defender for Endpoint alerts, helping reduce noise in alert and incident queues while keeping the signals available for investigation and hunting. Admins remain in full control and can disable rules as needed. #MicrosoftEntra #IdentitySecurity #ZeroTrust #MultiTenant #MicrosoftSecurity #IAM #Security #MicrosoftSecurity