New Email Actions in Advanced Hunting
Defender for Office 365Microsoft
October 2025
New Email Actions in Advanced Hunting: This update introduces the ability to perform Submit to Microsoft, Add to TABL and Initiate automated investigation actions directly from the Advanced Hunting interface in Microsoft Defender XDR. These actions, previously only available in Threat Explorer, are now accessible via custom queries in Advanced Hunting, enabling security teams to take investigative and response actions more efficiently and programmatically.
