Microsoft Defender for Cloud Apps will update the alert source field in new alerts generated after the rollout, starting early March 2025 and completing by late June 2025. This change affects various systems and requires administrators to update custom rules and notify users. No admin action is required before the rollout.
Applies to: Microsoft Defender XDR
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).