Feed / Defender
highDefenderAutomated Investigation and Response (AIR)updatem365_message_center · Jul 1, 2026
Microsoft Defender: Automated investigation and response (AIR) integrated into antivirus with manual triggering removed
Microsoft Defender XDR will integrate Automated Investigation and Response (AIR) capabilities directly into its antivirus protection, removing the separate manual triggering option. This change streamlines threat response by embedding AIR functionality within the core security platform.
“Services: Microsoft Defender XDR. <p><b>[What and Why]</b></p><p>As of September 1, 2026, automated investigation and response (AIR) will no longer run as a separate investigation experience or be available for manual triggering in Microsoft Defender. </p><p>The protection capabilities of AIR are already embedded wit…”
View original article →Security
threat_protectioncloud_security
Audience
adminsecurity_engineer
Environment
cloud
Ontology Topics
AZ-500
Classification confidence: 95%
Loading correlations…