Library management for live response is now generally available

March 2026
New features in Microsoft Defender for Endpoint

Feature: Library management for live response ( GA )
Library management for live response is now generally available. This feature provides a centralized view for managing files and scripts used during live response sessions.

Feature: New Microsoft Secure Score recommendations Preview
Microsoft Secure Score now includes new recommendations to help organizations reduce exposure to common attack techniques involving remote access and authentication relay attacks:

• Block file transfer over RDP: Restricts file transfer capabilities in Remote Desktop Protocol (RDP) sessions. This helps prevent attackers from using RDP sessions to transfer malicious files into the environment or exfiltrate sensitive data.
• SMB server security hardening against authentication relay attacks: Helps protect servers from credential relay attacks by strengthening Server Message Block (SMB) authentication protections, including enforcing Extended Protection for Authentication (EPA), SMB signing, and SMB encryption to ensure authentication integrity and protect SMB traffic from tampering or interception.