M365 Change Tracker

← All changes · defender

Update

The hunting graph in advanced hunting now includes new identity-focused predefined scenarios.

Why it matters: Upcoming change

The hunting graph in advanced hunting now includes new identity-focused predefined scenarios. These scenarios help you discover attack paths, privilege escalation routes, and credential access risks across on-premises and cloud environments, including Kerberoast and AS-REP roast paths, domain compromise routes, OAuth application risks, and guest user access to cloud resources.

Source updated 2026-05-01

Affected: Microsoft Defender XDR, Advanced Hunting

View at Microsoft →