Feed / Defender
mediumDefenderDefender XDRupdatem365_message_center · Sep 1, 2026
Microsoft Defender XDR: DLP alerts will be set as behaviors by default
Microsoft Defender XDR now sets DLP alerts as behaviors by default to reduce alert volume while preserving investigation data.
“Services: Microsoft Defender XDR, Microsoft Purview. <p><b>[What and why:]</b></p> <p>Microsoft Defender XDR is introducing a new built-in alert tuning rule that sets Microsoft Purview Data Loss Prevention (DLP) alerts as behaviors. This change is designed to reduce alert volume in Microsoft Defender XDR while preser…”
View original article →Security
threat_protectionvulnerability_managementattack_surface_reduction
Audience
security_engineeradmin
Environment
cloud
Ontology Topics
AZ-500SC-300
Classification confidence: 95%
Loading correlations…