M365 Change Tracker

← All changes · defender

Preview

In advanced hunting, you can now view all your user-defined rules—both custom detection rules and analytics rules—in the Detection rules page.

Why it matters: In preview

In advanced hunting, you can now view all your user-defined rules—both custom detection rules and analytics rules—in the Detection rules page. This feature also brings the following improvements: You can now filter for *every* column (in addition to Frequency and Organizational scope). For multiworkspace organizations that onboard multiple workspaces to Microsoft Defender, you can now view the Workspace ID column and filter by workspace. You can now view the details pane even for analytics rules. You can now perform the following actions on analytics rules: Turn on/off, Delete, Edit.

Source updated 2025-05-01

Affected: Microsoft Defender XDR, Advanced Hunting

View at Microsoft →