Feed / Defender
lowDefenderMicrosoft Defender for Office 365new featurem365_message_center · Sep 23, 2026
Microsoft Defender for Office 365: View approver details for remediation actions in Advanced Hunting
Added the ApproverUpn column to the EmailPostDeliveryEvents table in Microsoft Defender XDR Advanced Hunting, enabling security teams to identify approvers of remediation actions directly from hunting results.
“Services: Microsoft Defender XDR. <p><b>[What and why]</b></p><p>We've added a new<b> ApproverUpn</b> column to the <b>EmailPostDeliveryEvents</b> table in <i>Microsoft Defender XDR Advanced Hunting</i>. This enhancement allows security teams to identify who approved eligible remediation actions directly from <i>Adva…”
View original article →Security
threat_protectionendpoint_security
Audience
adminsecurity_engineer
Environment
cloud
Classification confidence: 90%
Loading correlations…