Merge pull request #5879 from MicrosoftDocs/main

[AutoPublish] main to live - 12/10 01:35 PST | 12/10 15:05 IST

Author: aditisrivastava07

defender-endpoint/android-support-signin.md

@@ -14,7 +14,7 @@ ms.collection:
 ms.topic: troubleshooting-general
 ms.subservice: android
 search.appverid: met150
-ms.date: 03/21/2025
+ms.date: 12/10/2025
 appliesto:
 - Microsoft Defender for Endpoint Plan 1
 - Microsoft Defender for Endpoint Plan 2
@@ -129,43 +129,35 @@ The Android devices Battery Optimization screen opens automatically as part of t
 
 5. Navigate back to Defender
 
-**Solution 2** (needed in case the Solution 1 does not work):
+**Solution 2** (needed in case the Solution 1 doesn't work):
 
-1. Install MDE app in personal profile. (Sign-in isn't required.)
+1. Install the Microsoft Defender for Endpoint app in personal profile. (Sign-in isn't required.)
 2. Open the Company Portal and tap on Settings.
 3. Go to the Battery Optimization section, tap on the **Turn Off** button, and then select on **Allow** to turn off Battery Optimization for the Company Portal.
 4. Again, go to the Battery Optimization section and tap on the **Turn On** button. The battery saver section opens.
 5. Find the Defender app and tap on it.
 6. Select **No Restriction**. Go back to the Defender app in work profile and tap on **Allow** button.  
 7. The application shouldn't be uninstalled from personal profile for this to work.
 
-## Unable to use banking applications with MDE app
+## Unable to use certain third party applications along with the Microsoft Defender for Endpoint app (VPN)
 
-**Applies to:** Banking apps like iMobile Pay (ICICI), PNB ONE.
+**Applies to:** (Not limited) Apps handling banking, government services, or handling sensitive personal information
 
-**Cause:** Android allows apps in the personal profile to check if there's a VPN active on the device, even outside of the personal profile. The banking app checks that and blocks it in VPN work profiles only. The banking app doesn't work with any other VPN product.
+**Cause:** Some applications, such as those used for banking, government services, or handling sensitive personal information, may restrict access if a VPN is detected on your device. These restrictions are determined by the app developer as part of their implementation and even applies all VPNs *including third party) on the device. Microsoft Defender doesn't control or enforce this behavior through its settings or policies.
 
-**Solution:**
-Users need to disable MDE VPN from the Settings page. The following steps can be used:
-
-1. Go to Settings on the mobile device.
-2. Search for VPN or open 'Network and Internet' and select on VPN.
-3. Select on Microsoft Defender and select Disconnect.
-
-Users should enable VPN when they're no longer using the banking app to ensure that their devices are protected.
-
-> [!NOTE]
-> This a temporary workaround. We are working on other alternatives to provide users more control over the VPN settings from within the app.
+**Workaround:**
+If an app doesn't function while a VPN is enabled or present in the work profile, you might need to disable the VPN or work profile when you use the app. 
+Users should enable VPN when they're no longer using the app to ensure that their devices are protected.
 
 ## Send in-app feedback
 
 If a user faces an issue, which isn't already addressed in the above sections or is unable to resolve using the listed steps, the user can provide **in-app feedback** along with **diagnostic data**. Our team can then investigate the logs to provide the right solution. Users can follow these steps to do the same:
 
-1. Open the **MDE application** on your device and select on the **profile icon** in the top-left corner.
+1. Open the **Microsoft Defender for Endpoint application** on your device and select the **profile icon** in the top-left corner.
 
     :::image type="content" source="media/select-profile-icon-1.jpg" alt-text="The profile icon in the Microsoft Defender for Endpoint portal" lightbox="media/select-profile-icon-1.jpg":::
 
-2. Select "Help & feedback".
+2. Select **Help & feedback**.
 
     :::image type="content" source="media/selecthelpandfeedback2.png" alt-text="The Help & feedback option that can be selected in the Microsoft Defender for Endpoint portal" lightbox="media/selecthelpandfeedback2.png":::
 

defender-endpoint/mde-linux-prerequisites.md

@@ -12,10 +12,10 @@ ms.collection:
 - m365-security
 - tier3
 - mde-linux
-ms.topic: conceptual
+ms.topic: article
 ms.subservice: linux
 search.appverid: met150
-ms.date: 11/11/2025
+ms.date: 12/10/2025
 ---
 
 # Prerequisites for Microsoft Defender for Endpoint on Linux
@@ -75,11 +75,15 @@ The following Linux server distributions and x64 (AMD64/EM64T) versions are supp
 - Red Hat Enterprise Linux 10.x
 - CentOS 7.2 and higher, excluding CentOS Stream
 - CentOS 8.x
+- CentOS Stream 8.x
+- CentOS Stream 9.x
+- CentOS Stream 10.x
 - Ubuntu 16.04 LTS
 - Ubuntu 18.04 LTS
 - Ubuntu 20.04 LTS
 - Ubuntu 22.04 LTS
 - Ubuntu 24.04 LTS
+- Ubuntu Pro
 - Debian 9 - 12
 - SUSE Linux Enterprise Server 12.x
 - SUSE Linux Enterprise Server 15.x
@@ -97,9 +101,13 @@ The following Linux server distributions and x64 (AMD64/EM64T) versions are supp
 
 **The following Linux server distributions on ARM64 are now GA:**
 
-- Ubuntu 20.04 ARM64
-- Ubuntu 22.04 ARM64
-- Ubuntu 24.04 ARM64
+- Ubuntu 20.04 LTS ARM64
+- Ubuntu 22.04 LTS ARM64
+- Ubuntu 24.04 LTS ARM64
+- Ubuntu Pro ARM64
+- CentOS Stream 8.x ARM64
+- CentOS Stream 9.x ARM64
+- CentOS Stream 10.x ARM64
 - Debian 11, 12 ARM64
 - Amazon Linux 2 ARM64
 - Amazon Linux 2023 ARM64

defender-xdr/access-den-graph-api.md

@@ -3,8 +3,8 @@ title: Accessing incident notifications and DENs using Graph security API
 ms.reviewer:
 description: The method to access Defender Experts Notifications using Graph security API
 ms.service: defender-experts-for-hunting
-ms.author: vpattnaik
-author: vpattnai
+ms.author: pauloliveria
+author: poliveria
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro

defender-xdr/additional-information-xdr.md

@@ -6,8 +6,8 @@ ms.service: defender-experts-for-xdr
 ms.mktglfcycl: deploy
 ms.sitesec: library
 ms.pagetype: security
-ms.author: vpattnaik
-author: vpattnai
+ms.author: pauloliveria
+author: poliveria
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro

defender-xdr/advanced-hunting-schema-changes.md

@@ -21,7 +21,7 @@ appliesto:
     - Microsoft Defender XDR
     - Microsoft Sentinel in the Microsoft Defender portal
 ms.topic: reference
-ms.date: 11/27/2025
+ms.date: 12/10/2025
 ---
 
 # Advanced hunting schema - Naming changes
@@ -38,7 +38,7 @@ Naming changes are automatically applied to queries that are saved in Microsoft
 - Queries that are saved elsewhere outside Microsoft Defender XDR
 
 ## November 2025
-- The Boolean field values in advanced hunting results will change from numeric (`1` and `0`) to textual (`True` and `False`) on January 25, 2026. While your queries and custom detection rules won't be affected by this change, you might want to update your automated processes (for example, scripts, playbooks, or integrations) parsing these values.
+- The Boolean field values in advanced hunting results will change from numeric (`1` and `0`) to textual (`True` and `False`) on February 25, 2026. While your queries and custom detection rules won't be affected by this change, you might want to update your automated processes (for example, scripts, playbooks, or integrations) parsing these values.
 
 
 - The [`AADSignInEventsBeta`](advanced-hunting-aadsignineventsbeta-table.md) and  [`AADSpnSignInEventsBeta`](advanced-hunting-aadspnsignineventsbeta-table.md) tables are being replaced by [`EntraIdSignInEvents`](advanced-hunting-entraidsigninevents-table.md) and [`EntraIdSpnSignInEvents`](advanced-hunting-entraidspnsigninevents-table.md), respectively. These changes are being made to remove the former tables' preview status and to align them with the existing product branding.

defender-xdr/api-access.md

@@ -4,8 +4,8 @@ description: Learn how to access the Microsoft Defender XDR APIs
 ms.service: defender-xdr
 f1.keywords: 
   - NOCSH
-ms.author: macapara
-author: mjcaparas
+ms.author: edbaynash
+author: EdB-MSFT
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro

defender-xdr/api-advanced-hunting.md

@@ -4,8 +4,8 @@ description: Learn how to run advanced hunting queries using Microsoft Defender
 ms.service: defender-xdr
 f1.keywords: 
   - NOCSH
-ms.author: macapara
-author: mjcaparas
+ms.author: edbaynash
+author: EdB-MSFT
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro

defender-xdr/api-articles.md

@@ -4,8 +4,8 @@ description: View a list of APIs related to Microsoft security and threat protec
 ms.service: defender-xdr
 f1.keywords: 
   - NOCSH
-ms.author: macapara
-author: mjcaparas
+ms.author: edbaynash
+author: EdB-MSFT
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro

defender-xdr/api-create-app-user-context.md

@@ -4,8 +4,8 @@ description: Learn how to access Microsoft Defender XDR APIs on behalf of a user
 ms.service: defender-xdr
 f1.keywords: 
   - NOCSH
-ms.author: macapara
-author: mjcaparas
+ms.author: edbaynash
+author: EdB-MSFT
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro

defender-xdr/api-create-app-web.md

@@ -4,8 +4,8 @@ description: Learn how to create an app to access Microsoft Defender XDR without
 ms.service: defender-xdr
 f1.keywords: 
   - NOCSH
-ms.author: macapara
-author: mjcaparas
+ms.author: edbaynash
+author: EdB-MSFT
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro