Message CenterUpdated messageFeature updateAdmin impact

MC1237728 — Advanced Hunting: new actions to block attachments and top-level URL domains

MC1237728Microsoft Defender XDRstayInformedUpdated: 6 March 2026

Microsoft Defender for Office 365 introduces two new Advanced Hunting remediation actions—blocking attachments and top-level URL domains—to speed SecOps response. Available early March 2026 for Plan 2 and Microsoft 365 E5 users, these features enable direct mitigation from hunting results with no user workflow impact.

Applies to: Microsoft Defender XDR
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).