MC1431377 — Microsoft Defender for Office 365: AIR Investigation Experience Improvements

Microsoft Defender for Office 365's AIR experience will add a manual refresh button, replacing auto-refresh, and simplify investigation names by removing email subjects and UPNs. These changes improve performance, reduce network activity, and support data minimization. No admin action is required, but SOC workflows and documentation should be updated.

Open in Message Center Email this update View in the live feed