Redaguoti

Bendrinti naudojant


What's new in Microsoft 365 Business Premium and Microsoft Defender for Business

Applies to:

This article lists new features in the latest release of Microsoft 365 Business Premium and Microsoft Defender for Business. Features that are currently in preview are denoted with (preview).

July 2024

  • (GA) Learning hub resources have moved from the Microsoft Defender portal to learn.microsoft.com. Access Microsoft Defender XDR Ninja training, learning paths, training modules and more. Browse the list of learning paths, and filter by product, role, level, and subject.

March 2024

  • (Preview) Turn preview options on in the main Microsoft 365 Defender settings together with other Microsoft 365 Defender preview features. Customers who are not using preview features yet continue to see the legacy settings under Settings > Endpoints > Advanced features > Preview features. For more information, see Microsoft 365 Defender preview features.

January 2024

  • Ability to manage endpoint security subscription settings. Defender for Business customers who have a mix of subscriptions (such as Defender for Business and Defender for Endpoint Plan 2 licenses) can now change their subscription settings to apply Defender for Endpoint Plan 2 features and capabilities across devices. See Manage your endpoint security subscription settings across client devices.

December 2023

  • Streaming API is now generally available for Defender for Business. For partners or customers looking to build their own security operations center, the Defender for Endpoint streaming API is now available for Defender for Business and Microsoft 365 Business Premium. See Use the streaming API with Microsoft Defender for Business.

October 2023

July 2023

Tip

Read all about the exciting, new capabilities releasing in July 2023 in the Tech Community blog: New SMB security innovations from Microsoft Inspire 2023.

  • Mobile threat defense is rolling out. Mobile threat defense includes operating system-level threat and vulnerability management, web protection, and app security. It's not generally available in Defender for Business and Microsoft 365 Business Premium. Learn more about mobile threat defense.

  • Automatic attack disruption is rolling out. During an ongoing attack, automatic attack disruption capabilities swiftly contain compromised devices to help stop lateral movement within the network and minimize the overall impact of the attack. Automatic attack disruption is included in Defender for Business and Microsoft 365 Business Premium. Learn more about automatic attack disruption.

  • Security summary reports are rolling out. Use these reports to view threats that were prevented by Defender for Business, Microsoft Secure Score status, and recommendations for improving security. See Reports in Microsoft Defender for Business.

  • Streaming API (preview) is now available for Defender for Business. For partners or customers looking to build their own security operations center, the Defender for Endpoint streaming API is now in preview for Defender for Business and Microsoft 365 Business Premium. The API supports streaming of device file, registry, network, sign-in events and more to Azure Event Hub, Azure Storage, and Microsoft Sentinel to support advanced hunting and attack detection. See Use the streaming API (preview) with Microsoft Defender for Business.

  • Managed detection and response integration with Blackpoint Cyber. This solution is ideal for customers who don't have the resources to invest in an in-house security operations center and for partners who want to augment their IT team with security experts to investigate, triage, and remediate the alerts generated by Defender for Business and Business Premium. Learn more bout Blackpoint Cyber.

  • Customizable security baselines and configuration drift reports in Microsoft 365 Lighthouse. For Microsoft Managed Service Providers (MSPs), Microsoft 365 Lighthouse includes security baselines to deploy a standardized set of configurations to customers' tenants. Microsoft 365 Lighthouse now lets MSPs customize baselines based on expertise and tailor them to customers' unique needs. Learn more about Microsoft 365 Lighthouse.

  • New training resources for Microsoft partners. To provide step-by-step guidance for partners on how to build services based on critical CIS cybersecurity controls, a Security Managed services kit and a three-part digital training series are now available. See IT partner resources to help build security services in the Tech Community blog: New SMB security innovations from Microsoft Inspire 2023.

March 2023

  • Mobile threat defense (preview) is added to Defender for Business. The ability to onboard iOS and Android devices to the standalone version of Defender for Business is now in preview! These capabilities provide OS-level threat and vulnerability management, web protection, and app security to help you and employees stay more secure on the go. See Mobile threat defense capabilities in Microsoft Defender for Business.

  • Monthly security summary report (preview) is added to Defender for Business (preview). The new monthly security summary report shows how secure your organization is across identity, devices, information, and apps. You can view threats detected (and blocked) by Defender for Business together with your current status from Microsoft Secure Score. Recommendations to improve your security are also provided. See Reports in Microsoft Defender for Business.

  • Device exposure score is now visible in Microsoft 365 Lighthouse (preview). Microsoft Cloud Solution Providers (CSPs) who are using Microsoft 365 Lighthouse can now view and manage device exposure scores across customer tenants. These capabilities enable partners to discover which customers' devices are at risk because of vulnerabilities. See Overview of the Vulnerability management page in Microsoft 365 Lighthouse.

January 2023

November 2022

July 2022

May 2022

March 2022

See also

What's new in Microsoft 365 Lighthouse