MC1163754 – M365 Change Digest

One-line summary

Defender for Office 365's Deep Analysis tab gains enhanced UI, improved detonation chains, expanded metadata, and exportable insights for better threat investigation, rolling out Nov 2025.

Similar updates

Details

Summary

Microsoft Defender for Office 365 will enhance the Deep Analysis tab on the Email Entity page with a refreshed UI, improved detonation chains, expanded metadata, and detailed behavior insights. Rollout starts October 2025 (preview) and November 2025 (general availability). No user action or compliance impact expected.

Body (from Message Center)

We’re excited to share recent enhancements to the Deep Analysis tab on the Email Entity page in Microsoft Defender for Office 365. These updates are designed to provide deeper insights and a more intuitive experience when investigating threats.

When this will happen:

Public Preview: We will begin rolling out early Oct 2025 and expect to complete by late Oct 2025.

General Availability (Worldwide): We will begin rolling out early Nov 2025 and expect to complete by mid-Nov 2025.

How this will affect your organization:

There will not be any impact on the security investigation and hunting workflow. Post rollout, security teams will have deeper insights from the detonation outcomes to help them make more informed decisions. The enhancements will provide:

A refreshed and streamlined user interface
Improved detonation chain with nested entity details for better threat visibility
Expanded URL and file metadata for better context
More detailed and exportable behavior insights

These improvements are designed to empower your security teams with richer, more actionable data to accelerate investigations and response.

URL detonation details:

Screenshot URL 1:

user settings

Screenshot URL 2:

user settings

Screenshot URL 3:

user settings

File detonation details:

Screenshot File 1:

user settings

Screenshot File 2:

user settings

Screenshot File 3:

user settings

What you need to do to prepare:

No action items needed from users or admin.

Compliance considerations:

No compliance considerations identified, review as appropriate for your organization.

Raw JSON (for debugging)

Expand/collapse the full payload below.

Show/hide raw

{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": null,
    "ai_actions": [],
    "ai_master_tags": [
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Defender for Office 365\u0027s Deep Analysis tab gains enhanced UI, improved detonation chains, expanded metadata, and exportable insights for better threat investigation, rolling out Nov 2025.",
    "ai_topics": [
      "Defender"
    ],
    "category": "stayInformed",
    "details_map": {
      "Summary": "Microsoft Defender for Office 365 will enhance the Deep Analysis tab on the Email Entity page with a refreshed UI, improved detonation chains, expanded metadata, and detailed behavior insights. Rollout starts October 2025 (preview) and November 2025 (general availability). No user action or compliance impact expected."
    },
    "id": "MC1163754",
    "importance": 0,
    "is_major_change": false,
    "last_modified": "2025-10-01T22:32:15Z",
    "ms_products": [
      "Defender"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Microsoft Defender XDR"
    ],
    "severity": "normal",
    "tags": [
      "Feature update",
      "User impact",
      "Admin impact"
    ],
    "title": "Enhancements to the Deep Analysis tab of Email Entity page by Microsoft Defender for Office 365"
  }
}