Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 274/275 feeds/APIs · 469/469 docs · 8/9 advisories · checked 16:19 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Defender for Office 365: Automated Investigation & Response (AIR) Platform Modernization – User Submission Playbook

Microsoft 365 Message Center Archive by Merill Fernando

Summary

We are modernizing the AIR platform for increased scalability and speed of AIR investigations to deliver the user submission playbook faster including quicker verdicts and faster resolutions.

Status
Launched
General availability target
Oct 2025
Preview target
Not published
Clouds
Worldwide (Standard Multi-Tenant), GCC, GCC High, DoD
Release phases
General Availability
Platforms
Web
Source created
11 Sep 2025
Source modified
24 Feb 2026 · 9mo ago
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 11 Nov 16:19 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current