Message CenterUpdated messageFeature updateAdmin impact

MC906487 — Microsoft Defender XDR: InitiatingProcessFolderPath changes to include file names

MC906487Microsoft Defender XDRplanForChangeUpdated: 5 November 2024

Microsoft Defender for Endpoint will update the InitiatingProcessFolderPath to include file names, affecting all Advanced Hunting tables. Rollout begins November 18, 2024. Organizations should adjust custom detection rules and queries accordingly. The change applies only to Windows activity.

Open in Message Center View in the live feed
Applies to: Microsoft Defender XDR
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).