Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Microsoft's edit ·

Document AgenticSecurity public beta APIs (#29795)

Microsoft's commit message in microsoftgraph/microsoft-graph-docs-contrib · commit 866bfb1 · +4 −0 lines · also on GitHub

Source wording view
⋯ 216 unchanged lines
217217
218218 Added the **incidentConfiguration** property to the [detectionAction](/graph/api/resources/security-detectionaction?view=graph-rest-beta&preserve-view=true) resource and the [incidentConfiguration](/graph/api/resources/security-incidentconfiguration?view=graph-rest-beta&preserve-view=true) complex type. Use this setting to exclude alerts generated by a custom detection rule from automatic incident correlation and create standalone, single-alert incidents.
219219
220 +### Security | Agentic security
221 +
222 +- Added the [agenticSecurityRoot](/graph/api/resources/agenticsecurityroot?view=graph-rest-beta&preserve-view=true) resource and related methods to discover security playbooks, create and monitor investigation sessions, inspect agent progress, and download investigation reports.
223 +
220224 ### Security | Audit log query
221225
222226 Added 35 members, from `PlannerCustomFieldDefinition` through `MESRawEmailContentMetadata`, to the [auditLogRecordType](/graph/api/resources/security-auditlogrecordtype?view=graph-rest-beta&preserve-view=true) enumeration and added the matching [auditData derived types](/graph/api/resources/security-auditdata-derived-types?view=graph-rest-beta&preserve-view=true) to represent workload-specific audit event payloads.
⋯ 35 unchanged lines

Microsoft's Markdown source from microsoftgraph/microsoft-graph-docs-contrib, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 10:07 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 18:36 UTC · 273 of 275 readable · 271 fully read · documentation 469/469 current