check before: 2024-05-01
Product:
Defender, Defender for Office 365, Defender XDR, Microsoft Graph
Platform:
Developer, World tenant
Status:
Change type:
Admin impact, Feature update, Updated message
Links:
Details:
Summary:
Microsoft Defender XDR is introducing Sender's copy clean-up features to enhance email remediation. This includes integration with Soft delete, wide support across platforms, and an undo capability. It applies to intra-organization and outbound emails, with a rollout expected from end of May to early September 2024. Admins will have improved management of Sent items with no action required before the rollout.
Details:
Updated August 15, 2024: We have updated the rollout timeline below. Thank you for your patience..
Coming soon to Microsoft Defender XDR: We will enhance email remediation capabilities with new Sender's copy clean-up features in Threat Explorer, email entity, Summary Panel, and Advanced hunting. These new features will streamline the process of managing Sent items, particularly for admins who use Soft delete and Move to inbox actions.
Key Features
Integration with Soft delete: Sender's copy clean-up will be incorporated as part of the Soft delete action.
Wide support: This action will be supported across various Defender XDR platforms including Threat Explorer, Take Action wizard from the email entity, Summary Panel, Advanced hunting, and through Microsoft Graph API.
Undo capability: An undo action will be available, allowing you to reverse the clean-up by moving items back to the Sent folder.
Note: Sender's copy clean-up will apply to intra-organization emails and outbound emails, ensuring that only the sender's copy is soft deleted for these emails and inbound messages are out of scope.
[When this will happen:]
General Availability (Worldwide): We will begin rolling out end of May 2024 and expect to complete by early September 2024 (previously late July).
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2024-05-22
updated:
2024-08-16
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
Pictures
XXXXXXX ... free basic plan only
Direct effects for Operations**
Email Management Disruption
Admins may face challenges in managing Sent items effectively due to the new Sender's copy clean-up feature, leading to potential confusion and errors in email remediation processes.
- impacted roles: IT Admin, Security Analyst
- references: https://learn.microsoft.com/defender-office-365/remediate-malicious-email-delivered-office-365, https://learn.microsoft.com/defender-office-365/threat-explorer-threat-hunting
User Experience Impact
Users may experience unexpected deletions of their sent emails, leading to frustration and potential loss of important communication, especially if the undo feature is not utilized properly.
- impacted roles: End User, Support Staff
- references: https://learn.microsoft.com/defender-office-365/threat-explorer-threat-hunting?view=o365-worldwide, https://learn.microsoft.com/defender-xdr/whats-new?branch=maccruz-takeaction
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
change history
| Date | Property | old | new |
| 2024-08-16 | MC Last Updated | 06/06/2024 23:27:36 | 2024-08-16T00:45:14Z |
| 2024-08-16 | MC Messages | Updated June 6, 2024: We have updated the content below with additional information links.
Coming soon to Microsoft Defender XDR: We will enhance email remediation capabilities with new Sender's copy clean-up features in Threat Explorer, email entity, Summary Panel, and Advanced hunting. These new features will streamline the process of managing Sent items, particularly for admins who use Soft delete and Move to inbox actions. Key Features Integration with Soft delete: Sender's copy clean-up will be incorporated as part of the Soft delete action. Wide support: This action will be supported across various Defender XDR platforms including Threat Explorer, Take Action wizard from the email entity, Summary Panel, Advanced hunting, and through Microsoft Graph API. Undo capability: An undo action will be available, allowing you to reverse the clean-up by moving items back to the Sent folder. Note: Sender's copy clean-up will apply to intra-organization emails and outbound emails, ensuring that only the sender's copy is soft deleted for these emails and inbound messages are out of scope. [When this will happen:] General Availability (Worldwide): We will begin rolling out end of May 2024 and expect to complete by late July 2024. | Updated August 15, 2024: We have updated the rollout timeline below. Thank you for your patience..
Coming soon to Microsoft Defender XDR: We will enhance email remediation capabilities with new Sender's copy clean-up features in Threat Explorer, email entity, Summary Panel, and Advanced hunting. These new features will streamline the process of managing Sent items, particularly for admins who use Soft delete and Move to inbox actions. Key Features Integration with Soft delete: Sender's copy clean-up will be incorporated as part of the Soft delete action. Wide support: This action will be supported across various Defender XDR platforms including Threat Explorer, Take Action wizard from the email entity, Summary Panel, Advanced hunting, and through Microsoft Graph API. Undo capability: An undo action will be available, allowing you to reverse the clean-up by moving items back to the Sent folder. Note: Sender's copy clean-up will apply to intra-organization emails and outbound emails, ensuring that only the sender's copy is soft deleted for these emails and inbound messages are out of scope. [When this will happen:] General Availability (Worldwide): We will begin rolling out end of May 2024 and expect to complete by early September 2024 (previously late July). |
| 2024-08-16 | MC End Time | 09/30/2024 09:00:00 | 2024-10-21T09:00:00Z |
| 2024-08-16 | MC Summary | Microsoft Defender XDR is introducing Sender's copy clean-up features to enhance email remediation. This includes integration with Soft delete, wide support across platforms, and an undo capability. It applies to intra-organization and outbound emails, with a rollout expected from end of May to late July 2024. Admins will have improved management of Sent items with no action required before the rollout. | Microsoft Defender XDR is introducing Sender's copy clean-up features to enhance email remediation. This includes integration with Soft delete, wide support across platforms, and an undo capability. It applies to intra-organization and outbound emails, with a rollout expected from end of May to early September 2024. Admins will have improved management of Sent items with no action required before the rollout. |
| 2024-06-07 | MC Messages | Coming soon to Microsoft Defender XDR: We will enhance email remediation capabilities with new Sender's copy clean-up features in Threat Explorer, email entity, Summary Panel, and Advanced hunting. These new features will streamline the process of managing Sent items, particularly for admins who use Soft delete and Move to inbox actions.
Key Features Integration with Soft delete: Sender's copy clean-up will be incorporated as part of the Soft delete action. Wide support: This action will be supported across various Defender XDR platforms including Threat Explorer, Take Action wizard from the email entity, Summary Panel, Advanced hunting, and through Microsoft Graph API. Undo capability: An undo action will be available, allowing you to reverse the clean-up by moving items back to the Sent folder. Note: Sender's copy clean-up will apply to intra-organization emails and outbound emails, ensuring that only the sender's copy is soft deleted for these emails and inbound messages are out of scope. [When this will happen:] General Availability (Worldwide): We will begin rolling out end of May 2024 and expect to complete by late July 2024. | Updated June 6, 2024: We have updated the content below with additional information links.
Coming soon to Microsoft Defender XDR: We will enhance email remediation capabilities with new Sender's copy clean-up features in Threat Explorer, email entity, Summary Panel, and Advanced hunting. These new features will streamline the process of managing Sent items, particularly for admins who use Soft delete and Move to inbox actions. Key Features Integration with Soft delete: Sender's copy clean-up will be incorporated as part of the Soft delete action. Wide support: This action will be supported across various Defender XDR platforms including Threat Explorer, Take Action wizard from the email entity, Summary Panel, Advanced hunting, and through Microsoft Graph API. Undo capability: An undo action will be available, allowing you to reverse the clean-up by moving items back to the Sent folder. Note: Sender's copy clean-up will apply to intra-organization emails and outbound emails, ensuring that only the sender's copy is soft deleted for these emails and inbound messages are out of scope. [When this will happen:] General Availability (Worldwide): We will begin rolling out end of May 2024 and expect to complete by late July 2024. |
| 2024-06-07 | MC Title | Microsoft Defender XDR: Enhancing email remediation with Sender’s copy clean-up features | (Updated) Microsoft Defender XDR: Enhancing email remediation with Sender’s copy clean-up features |
| 2024-06-07 | MC Last Updated | 05/22/2024 01:50:10 | 2024-06-06T23:27:36Z |
| 2024-06-07 | MC MessageTagNames | Feature update, Admin impact | Updated message, Feature update, Admin impact |
| 2024-06-07 | MC prepare | This rollout will happen automatically by the specified date with no admin action required before the rollout. You may want to notify your admins about this change and update any relevant documentation as appropriate.
Learn more: Threat hunting in Threat Explorer and Real-time detections - Microsoft Defender for Office 365 | Microsoft Learn Before rollout, we will update this post with revised documentation. https://learn.microsoft.com/defender-office-365/threat-explorer-threat-hunting?view=o365-worldwide | This rollout will happen automatically by the specified date with no admin action required before the rollout. You may want to notify your admins about this change and update any relevant documentation as appropriate.
Learn more: Threat hunting in Threat Explorer and Real-time detections - Microsoft Defender for Office 365 | Microsoft Learn Threat Explorer- Threat hunting in Threat Explorer and Real-time detections - Microsoft Defender for Office 365 | Microsoft Learn Remediation- Remediate malicious email that was delivered in Office 365 - Microsoft Defender for Office 365 | Microsoft Learn Advanced hunting-Take action on advanced hunting query results in Microsoft Defender XDR - Microsoft Defender XDR | Microsoft Learn MDO What's new- What's new in Microsoft Defender for Office 365 - Microsoft Defender for Office 365 | Microsoft Learn XDR what's new - What's new in Microsoft Defender XDR - Microsoft Defender XDR | Microsoft Learn https://learn.microsoft.com/defender-office-365/defender-for-office-365-whats-new?view=o365-worldwide#may-2024 https://learn.microsoft.com/defender-office-365/remediate-malicious-email-delivered-office-365 https://learn.microsoft.com/defender-office-365/threat-explorer-threat-hunting https://learn.microsoft.com/defender-office-365/threat-explorer-threat-hunting?view=o365-worldwide https://review.learn.microsoft.com/defender-xdr/advanced-hunting-take-action?branch=maccruz-takeaction https://review.learn.microsoft.com/defender-xdr/whats-new?branch=maccruz-takeaction |
Last updated 8 months ago
