Microsoft Defender for Endpoint will migrate the internal operations of the Endpoint Attack Notifications feature to a new system starting early May 2024. Some MDE prior certifications will not transfer to one component of the new system, but there will be no other changes in service or user experience. No action is needed to prepare for this rollout, but admins should be notified and relevant documentation updated. Opt-out is available in the Defender XDR portal.
Applies to: Microsoft Defender XDR
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).