The global search for entities in the Microsoft Defender portal is now generally available
September 2024 Update
- (GA) The global search for entities in the Microsoft Defender portal is now generally available. The enhanced search results page centralizes the results from all entities. For more information, see Global search in the Microsoft Defender portal.
- (GA) Copilot in Defender now includes the identity summary capability, providing instant insights into a user's risk level, sign in activity, and more. For more information, see Summarize identity information with Copilot in Defender.
- Microsoft Defender Threat Intelligence customers can now view the latest featured threat intelligence articles in the Microsoft Defender portal home page. The Intel explorer page now also has an article digest that notifies them of the number of new Defender TI articles that were published since they last accessed the Defender portal.
- Microsoft Defender XDR Unified RBAC permissions are added to submit inquiries and view responses from Microsoft Defender Experts. You can also view responses to inquires submitted to Ask Defender Experts through your listed email addresses when submitting your inquiry or in the Defender portal by navigating to Reports > Defender Experts messages.
- (GA) Advanced hunting context panes are now available in more experiences. This allows you to access the advanced hunting feature without leaving your current workflow.
- For incidents and alerts generated by analytics rules, you can select Run query to explore the results of the related analytics rule.
- In the analytics rule wizard's Set rule logic step, you can select View query results to verify the results of the query you are about to set.
- In the query resources report, you can view any of the queries by selecting the three dots on the query row and selecting Open in query editor.
- For device entities involved in incidents or alerts, Go hunt is also available as one of the options after selecting the three dots on the device side panel.