531761 – Microsoft Defender for Office 365: Admins can hunt on calls in Microsoft Teams

Product:

Defender, Defender for Office 365, Teams

Platform:

Web, World tenant

Status:

In development

Change type:

Links:

Details:

Security admins with Defender for Office 365 Plan 2 can hunt on calls and meetings made inside Microsoft Teams for their organization

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability

Created:
2025-12-09

updated:
2026-01-17

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Increased Security Risks
Without proper preparation, the implementation of call hunting features may expose sensitive information during calls, leading to potential data breaches.
   - roles: Security Admin, Compliance Officer
   - references: https://www.microsoft.com/en-us/microsoft-365/security/office-365-security/microsoft-defender-for-office-365, https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-defender-for-office-365-hunting-in-teams-calls/ba-p/3651235

User Experience Disruption
If the new hunting feature is enabled without adequate training, users may experience confusion or frustration, impacting their productivity during calls.
   - roles: End User, IT Support
   - references: https://www.microsoft.com/en-us/microsoft-365/security/office-365-security/microsoft-defender-for-office-365, https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-defender-for-office-365-hunting-in-teams-calls/ba-p/3651235

Configutation Options**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Microsoft has introduced a new feature for security administrators using Defender for Office 365 Plan 2, allowing them to "hunt" or investigate calls and meetings within Microsoft Teams. This means that admins can now track and analyze communication activities to ensure security and compliance within their organization.

Think of it like a security guard at a concert. Just as the guard keeps an eye on the crowd to ensure everyone's safety, security admins can now monitor Teams calls and meetings to spot any unusual or potentially harmful activities. This feature is particularly useful for identifying and addressing security threats, ensuring that the organization's communication channels remain secure.

This capability is available for organizations using Microsoft Teams, which is a platform for chat, video meetings, and collaboration. By integrating this feature into Teams, Microsoft is providing an additional layer of security, helping organizations protect sensitive information shared during virtual meetings and calls.

In practical terms, this means that if there's a suspicious activity or a security concern, admins can quickly access and review the relevant Teams communications. This proactive approach helps in maintaining a secure digital environment, much like how a lifeguard at a pool watches over swimmers to prevent accidents before they happen.

Overall, this new feature in Microsoft Defender for Office 365 enhances the ability of security teams to safeguard their organization's digital interactions, ensuring that communication remains both effective and secure.