{"data":{"id":"defender-endpoint","name":"Defender for Endpoint (streamlined)","summary":"Streamlined device connectivity for Microsoft Defender for Endpoint on Windows, with the update, certificate validation, SmartScreen and Live Response hosts.","scenario":"Managed device","products":["defender"],"lastReviewed":"2026-10-06","m365SetIds":[],"endpointVersion":"2026081400","missingSetIds":[],"references":[{"url":"https://learn.microsoft.com/en-us/defender-endpoint/configure-device-connectivity#option-1-configure-connectivity-using-the-simplified-domain","title":"Onboard devices using streamlined connectivity for Microsoft Defender for Endpoint"},{"url":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial","title":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial"}],"notes":"Do not TLS-inspect *.endpoint.security.microsoft.com or require proxy authentication for it. Update hosts are optional when updates come from WSUS, a file share or Configuration Manager. Linux-only, network scanner and portal URLs are left out; portal addresses are in m365-admin. The downloadable streamlined URL spreadsheet has been replaced by the Learn page.","entries":[{"destination":"*.endpoint.security.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Consolidated core MDE services: cloud-delivered protection (MAPS), sample submission and AutoIR storage, command and control, cyber/diagnostic data","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/configure-device-connectivity#option-1-configure-connectivity-using-the-simplified-domain","sourceTitle":"Onboard devices using streamlined connectivity for Microsoft Defender for Endpoint","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Port 443 comes from the streamlined commercial list (URLs used for core functionality). Exclude from TLS/SSL inspection and MITM: the service uses certificate pinning, and enforcing proxy user authentication breaks it. configure-environment says devices need it even on standard connectivity. IP-only alternative: service tags MicrosoftDefenderForEndpoint plus OneDsCollector (both needed)."},{"destination":"*.smartscreen-prod.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"SmartScreen browsing protection, network/web protection, web content filtering, custom URL/IP indicators","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-core-functionality","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Type Required. Optional in disconnected environments; required for custom URL/IP indicators. All OSes."},{"destination":"*.smartscreen.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"SmartScreen web/network protection and app-execution reputation","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-core-functionality","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Listed in two rows: 'Web & network protection' (Required) and 'SmartScreen' (Optional, Windows)."},{"destination":"*.checkappexec.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"SmartScreen check of application execution for trusted apps","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-core-functionality","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Optional; Windows; reputation of downloaded apps."},{"destination":"*.urs.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"SmartScreen application reputation","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-core-functionality","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Optional; Windows."},{"destination":"reflector.defender.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Defender IPv6 connectivity probe","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-core-functionality","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Optional; all OSes; added 06/02/2026."},{"destination":"go.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Defender Antivirus CDN: security intelligence and platform updates (MMPC alternative/fallback)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-updates","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":89,"placeholders":[],"notes":"Required; optional if updates are distributed centrally (WSUS, mirror, ConfigMgr)."},{"destination":"definitionupdates.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Defender Antivirus security intelligence and platform update CDN","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-updates","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Optional if updates are distributed centrally."},{"destination":"https://www.microsoft.com/security/encyclopedia/adlpackages.aspx","kind":"Url","protocol":"TCP","ports":[443],"purpose":"Defender Antivirus update package location (MMPC)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-updates","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Optional if updates are distributed centrally."},{"destination":"*.update.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Windows Update source for security intelligence, platform and EDR sensor updates","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-updates","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":164,"placeholders":[],"notes":"Windows; optional with WSUS/mirror/ConfigMgr."},{"destination":"*.delivery.mp.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Windows Update delivery for Defender updates","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-updates","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Windows; optional with central update distribution."},{"destination":"*.windowsupdate.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Windows Update delivery for Defender updates","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-updates","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 164 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":164,"placeholders":[],"notes":"Windows; optional with central update distribution. Listed on 443; ctldl.windowsupdate.com is listed separately on port 80."},{"destination":"*.download.windowsupdate.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Windows Update download for Defender updates","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-updates","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 164 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Windows; optional with central update distribution."},{"destination":"*.download.microsoft.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Microsoft download CDN for Defender updates","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-updates","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Windows; optional with central update distribution. EDR sensor updates ship with Windows Update; KB5005292 for 2012 R2/2016."},{"destination":"www.microsoft.com/pkiops/*","kind":"Url","protocol":"TCP","ports":[80],"purpose":"Certificate revocation list updates used when creating the SSL connection to MAPS","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-certificate-validation-checks","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Published without a scheme; port 80 means plain HTTP. Optional if root trust lists are managed another way. If cloud protection can't reach it through a proxy, the page says to set SSLOptions=0 under HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows Defender\\Spynet."},{"destination":"www.microsoft.com/pki/*","kind":"Url","protocol":"TCP","ports":[80],"purpose":"Certificate revocation list updates (Windows certificate validation)","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-certificate-validation-checks","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Published without a scheme; port 80."},{"destination":"ctldl.windowsupdate.com","kind":"Fqdn","protocol":"TCP","ports":[80],"purpose":"Automatic root update / certificate trust list; flags compromised certificates as untrusted","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-certificate-validation-checks","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Intune (MEM) endpoint set 164 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":null,"placeholders":[],"notes":"Disconnected devices must update CTLs offline instead (configure-environment, 'Connect devices without direct internet access')."},{"destination":"crl.microsoft.com","kind":"Fqdn","protocol":"TCP","ports":[80],"purpose":"Certificate revocation lists for certificate validation","required":true,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#urls-used-for-certificate-validation-checks","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 50 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":84,"placeholders":[],"notes":"Windows."},{"destination":"login.microsoftonline.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Live Response push notifications (WNS) and Entra sign-in to the Defender portal","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#additional-service-urls","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"EntraSystem","acquisitionConfidence":"Likely","acquisitionBasis":"In Microsoft 365 endpoint set 56, one of the Entra identity sets. Microsoft documents that the always-on Entra system profile covers sign-in and Graph, and that the Microsoft traffic profile is built from this list, so it is expected to be taken before Internet Access. Microsoft publishes neither profile's host list.","expectedAtWebFiltering":false,"m365SetId":56,"placeholders":[],"notes":"Optional for devices (Live Response push model; needs direct connection or proxy bypass on Windows client OS). Also listed under 'Defender portal URLs' as https://login.microsoftonline.com for admin sign-in."},{"destination":"*.wns.windows.com","kind":"WildcardFqdn","protocol":"TCP","ports":[443],"purpose":"Windows Push Notification Services for Live Response","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#additional-service-urls","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 SharePoint endpoint set 35 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":35,"placeholders":[],"notes":"Optional; the page says WNS can't be used through a proxy."},{"destination":"login.live.com","kind":"Fqdn","protocol":"TCP","ports":[443],"purpose":"Live Response push notification model","required":false,"origin":"Published","reason":null,"sourceUrl":"https://learn.microsoft.com/en-us/defender-endpoint/streamlined-device-connectivity-urls-commercial#additional-service-urls","sourceTitle":"Microsoft Defender for Endpoint streamlined connectivity URLs - commercial","acquisition":"Microsoft365","acquisitionConfidence":"Possible","acquisitionBasis":"In Microsoft 365 Common endpoint set 97 (Default category). Microsoft documents that the Microsoft traffic profile is built from this list, combined by traffic category, but not which categories it includes.","expectedAtWebFiltering":null,"m365SetId":97,"placeholders":[],"notes":"Optional; Windows client."}],"evidence":{"confidence":"Current","sources":[],"note":null}},"metadata":{"apiVersion":"1","snapshotId":"8262706f51794f7db21e8bd3f982b386","refreshedAt":"2026-10-07T05:10:36.5571664+00:00","observingSince":"2026-09-26T17:11:44.4078421+00:00","evaluatedAt":"2026-10-07T05:20:23.7237185+00:00","evidence":{"confidence":"Current","sources":[{"sourceId":"windows-itpro","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"microsoft-security-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"azure-updates","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"microsoft-365-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"exchange-team-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"intune-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"entra-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-xdr-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-server-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"powershell-team-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"microsoft-security-blog-main","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"teams-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"sharepoint-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-cloud-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"sentinel-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"avd-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"azure-arc-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"configmgr-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"sql-server-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"onedrive-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"fabric-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"powerbi-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"power-platform-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"azure-governance-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"core-infrastructure-security-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"askds","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"itops-talk-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"sysinternals-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-insider-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-experience-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"security-baselines-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"azure-infrastructure-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"microsoft-365-developer-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"purview-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-endpoint-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"entra-identity-platform-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"azure-devops-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"jamf-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"jamf-status-history","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"oracle-security-alerts","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"cloudflare-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"openai-news","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"google-gemini-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"evotec-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"office365itpros","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"oofhours","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"msendpointmgr","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"andrewstaylor","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"jeffreyappel","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"askwoody","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"borncity","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"petri","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"patchmypc","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"dynamics-365-product-updates","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"practical365","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"call4cloud","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"dirteam-sander","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"chrisse","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"dotnet-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"jan-bakker","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"adsecurity","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"maester-blog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"entra-news","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"nathan-mcnulty","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"graph-changelog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"msrc-security-updates","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"msrc-cvrf","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"cisa-kev","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"first-epss","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"public-exploit-code","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"microsoft-365-roadmap","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-known-issues","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"microsoft-lifecycle","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"edge-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"m365-apps-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"teams-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-updates","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"exchange-builds","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"sharepoint-builds","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"sql-server-builds","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"dotnet-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-admx","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"powershell-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"graph-powershell-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"az-powershell-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"entra-powershell-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"psresourceget-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"psreadline-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"azure-cli-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-terminal-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"winget-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"vscode-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"exchange-online-powershell-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"teams-powershell-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"chrome-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"firefox-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"apple-security-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"oracle-java-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"jamf-pro-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"android-security-bulletins","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"vmware-esxi-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"vmware-vcenter-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"pnp-powershell-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"pester-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"dbatools-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"maester-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"adessentials-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"gpozaurr-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"testimo-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"mailozaurr-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"pswritehtml-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"pswriteoffice-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"psparsehtml-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"pspublishmodule-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"pseventviewer-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"dnsclientx-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"cleanupmonster-versions","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"openai-models","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"anthropic-models","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"gemini-models","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"global-secure-access-client-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"global-secure-access-macos-client-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"global-secure-access-connector-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"global-secure-access-sensor-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-endpoint-android-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-endpoint-ios-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-endpoint-windows-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-endpoint-macos-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-endpoint-linux-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"intune-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"entra-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-xdr-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"purview-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-identity-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-office-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-cloud-apps-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"defender-cloud-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"sentinel-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-365-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"avd-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"copilot-studio-whats-new","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"azure-arc-agent-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"openai-api-changelog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"claude-release-notes","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"gemini-api-changelog","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-message-center","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-11-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-10-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"windows-server-releases","confidence":"Current","lastReadAt":"2026-10-07T05:10:36.5571664+00:00"},{"sourceId":"azure-service-tags-public","confidence":"Current","lastReadAt":"2026-10-06T08:00:54.1096255+00:00"},{"sourceId":"m365-endpoints-worldwide","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.692576+00:00"},{"sourceId":"outlook-known-issues","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6927646+00:00"},{"sourceId":"excel-known-issues","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6928023+00:00"},{"sourceId":"graph-known-issues","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6928251+00:00"},{"sourceId":"identity-breaking-changes","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6928362+00:00"},{"sourceId":"powershell-releases","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6928574+00:00"},{"sourceId":"graph-powershell-releases","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.692893+00:00"},{"sourceId":"azure-cli-releases","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6929108+00:00"},{"sourceId":"azure-public-incidents","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6929236+00:00"},{"sourceId":"azure-incident-reviews","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6930439+00:00"},{"sourceId":"security-baseline-artifacts","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6930828+00:00"},{"sourceId":"entra-connect-releases","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6931216+00:00"},{"sourceId":"intune-notices","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2521163+00:00"},{"sourceId":"intune-in-development","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2521393+00:00"},{"sourceId":"autopilot-whats-new","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2521479+00:00"},{"sourceId":"autopilot-preparation-whats-new","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2521673+00:00"},{"sourceId":"windows-365-enterprise-known-issues","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2521731+00:00"},{"sourceId":"windows-365-business-known-issues","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2526882+00:00"},{"sourceId":"fabric-whats-new","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2527703+00:00"},{"sourceId":"windows-server-feature-deprecations","confidence":"Current","lastReadAt":"2026-10-07T01:05:54.6161314+00:00"},{"sourceId":"learn-toc-global-secure-access","confidence":"Current","lastReadAt":"2026-10-06T16:26:11.8566792+00:00"},{"sourceId":"learn-toc-intune","confidence":"Current","lastReadAt":"2026-10-06T16:26:11.8586908+00:00"},{"sourceId":"learn-toc-entra-conditional-access","confidence":"Current","lastReadAt":"2026-10-06T16:26:11.8587896+00:00"},{"sourceId":"learn-toc-entra-authentication","confidence":"Current","lastReadAt":"2026-10-06T16:26:11.8588521+00:00"},{"sourceId":"learn-toc-defender-endpoint","confidence":"Current","lastReadAt":"2026-10-06T16:26:11.858887+00:00"},{"sourceId":"learn-toc-windows-deployment","confidence":"Current","lastReadAt":"2026-10-06T16:26:11.8589176+00:00"},{"sourceId":"learn-toc-windows-client-management","confidence":"Current","lastReadAt":"2026-10-06T16:26:11.8589415+00:00"},{"sourceId":"vmware-security-advisories","confidence":"Current","lastReadAt":"2026-10-07T05:09:35.6931636+00:00"},{"sourceId":"product-terms-feed","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2528034+00:00"},{"sourceId":"product-terms-mca","confidence":"Current","lastReadAt":"2026-10-07T00:04:56.2529033+00:00"},{"sourceId":"partner-announcements","confidence":"Current","lastReadAt":"2026-10-06T23:03:56.4694574+00:00"}],"note":null}}}