Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Microsoft's edit ·

Document custom detection lookback and event grouping in beta (#29714)

Microsoft's commit message in microsoftgraph/microsoft-graph-docs-contrib · commit 4c41b0d · +2 −0 lines · also on GitHub

Source wording view
⋯ 57 unchanged lines
5858
5959 ### Security
6060
61 +- Added the **lookback** property to the [ruleSchedule](/graph/api/resources/security-ruleschedule?view=graph-rest-beta&preserve-view=true) resource to control the time window evaluated by each scheduled custom detection rule run.
62 +- Added the **eventGroupingKind** property to the [alertTemplate](/graph/api/resources/security-alerttemplate?view=graph-rest-beta&preserve-view=true) resource and the **eventGroupingKind** enumeration type. Use `singleAlert` to group matching events from one scheduled execution into a single alert, or `alertPerEvent` to create a separate alert for each matching event.
6163 - Added the [resourceQuota](/graph/api/resources/resourcequota?view=graph-rest-beta&preserve-view=true) resource type and the **resourceQuotas** property on the [organization](/graph/api/resources/organization?view=graph-rest-beta&preserve-view=true) resource to let administrators monitor and configure quota allocations for resource types in their Microsoft Entra organization.
6264
6365 ### Security | Case management
⋯ 228 unchanged lines

Microsoft's Markdown source from microsoftgraph/microsoft-graph-docs-contrib, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 13 Nov 10:20 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 14 Nov 08:15 UTC · 274 of 275 readable · 269 fully read · documentation 469/469 current