(Updated) Microsoft Defender for Office 365: New email submissions data in Advanced Hunting
Rollout
- Ends
- 28 Dec 2026
Rollout dates are often only in the text. When Microsoft moves them, the change shows under "What changed".
What the notice says
Microsoft's text, with its sections, lists and tables; source markup removedUpdated October 9, 2026: We have updated the timeline. Thank you for your patience.
What and Why
Microsoft Defender for Office 365 is introducing new email submissions data in Advanced Hunting in Microsoft Defender. The new submissions tables provide security operations teams with greater visibility into email submission activity and results, enabling analysts to query submission activity alongside other Defender data and build hunting and detection workflows tailored to their organization.
Rollout Schedule
Public Preview (Worldwide): We will begin rolling out in early October 2026 and expect to complete by early October 2026.
General Availability (Worldwide): We will begin rolling out late October 2026 (previously early October) and expect to complete by mid-November 2026 (previously early October).
Impact on Your Organization
Who is affected
- Security operations teams that use Advanced Hunting in Microsoft Defender.
- Admins and analysts who investigate email submissions and submission results.
Platforms/Services
- Microsoft Defender for Office 365
- Microsoft Defender XDR
- Advanced Hunting
What will happen
- Two new Advanced Hunting tables will be available: SubmissionEvents and SubmissionResults.
- SubmissionEvents provides information about email submission events.
- SubmissionResults provides information about the results associated with those submissions.
- Security teams can query submission information directly and correlate it with other Microsoft Defender XDR data.
- The tables can be used with Advanced Hunting custom detections, allowing organizations to create detections based on submission activity that is important to their SOC workflows.
Action Required/Recommendations
No immediate action is required. Additional documentation for the new tables will be provided as part of the release.
Compliance considerations
No compliance considerations identified. Review as appropriate for your organization.
What changed
Between the versions this installation saw, newest firstThis installation has seen one version of this notice, first on 19 Oct 2026. Later changes will show here.
Linked documentation
Microsoft pages the notice links toThe notice links to no Microsoft Learn or Support page that this installation reads.
Not confirmed here
What this page cannot tell you- Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.
- Versions before 19 Oct 2026: this installation first saw the notice after Microsoft posted it.