Merge branch 'main' into WI347660-recreate-content-curation-security-assessments

Author: padmagit77

.github/workflows/AutoPublish.yml

@@ -7,7 +7,8 @@ permissions:
 
 on:
   schedule:
-    - cron: "25 2,5,8,11,14,17,20,22 * * *" # Times are UTC based on Daylight Saving Time. Need to be adjusted for Standard Time. Scheduling at :25 to account for queuing lag.
+    # - cron: "25 2,5,8,11,14,17,20,22 * * *" # Times are UTC based on Daylight Saving Time (~Mar-Nov). Scheduling at :25 to account for queuing lag.
+    - cron: "25 3,6,9,12,15,18,21,23 * * *" # Times are UTC based on Standard Time (~Nov-Mar). Scheduling at :25 to account for queuing lag.
 
   workflow_dispatch:
 

defender-endpoint/android-new-ux.md

@@ -15,7 +15,7 @@ ms.collection:
 ms.topic: reference
 ms.subservice: android
 search.appverid: met150
-ms.date: 09/16/2025
+ms.date: 11/06/2025
 ---
 
 # User experiences in Microsoft Defender for Endpoint on Android
@@ -24,7 +24,29 @@ As part of our ongoing commitment to deliver exceptional user experiences, we're
 
 The new enhancements are designed to improve usability, streamline navigation, and ensure our app meets the evolving needs of our users.
 
-## Key changes - September 2025
+## Key changes - November 2025
+
+In this release, we've made it easier for users to share feedback, including logs, to the Microsoft Defender team. The changes include:
+
+- [A new bottom pane that makes it easier for users to share feedback and logs](#bottom-pane-experience)
+- [A new **Send logs to Microsoft** option that enables users to quickly send logs to Microsoft](#one-click-send-logs-experience)
+
+
+### Bottom pane experience
+
+When users select **Help and Feedback** in the left navigation pane (Screen 1, accessible by tapping the profile picture), a new bottom feedback pane opens (Screen 2). This pane has been updated to improve readability and make it easier for users to share feedback.
+
+The **Send feedback** option in the updated bottom pane enables users to share positive or negative feedback, along with Microsoft Defender and authenticator logs, which will be accessible to the Microsoft Defender team. When a user selects **Send feedback**, they are redirected to a new screen (Screen 3) where they can include logs along with their feedback submission.
+
+:::image type="content" source="./media/android-new-ux/bottom-experience-android.png" alt-text="Screenshots showing how to send feedback and logs from the Microsoft Defender mobile app options menu." border="false":::
+
+### One-click *Send Logs* experience
+
+A new **Send logs to Microsoft** option has been added directly to the left navigation pane. This enables users to quickly send logs to Microsoft. It redirects them to the logs submission page (Screen 2). This option is particularly useful when a support case has been created and a support engineer is assigned, providing a convenient way for users to submit logs. Because this option doesn't allow users to include written feedback, the Defender team will not have access to the logs unless an incident ID is explicitly shared via mail or support request. This option collects logs from both the Defender and Authenticator apps.
+
+:::image type="content" source="./media/android-new-ux/one-click-feedback-android.png" alt-text="Screenshots showing how to send logs directly to Microsoft from the Microsoft Defender mobile app options menu." border="false":::
+
+ ## Key changes - September 2025
 
 We're pleased to introduce the new Onboarding screens that come up when the user starts onboarding after sign-in.
 

defender-endpoint/android-whatsnew.md

@@ -15,18 +15,31 @@ ms.collection:
 ms.topic: reference
 ms.subservice: android
 search.appverid: met150
-ms.date: 09/05/2025
+ms.date: 11/06/2025
 appliesto:
   - Microsoft Defender for Endpoint
 
 ---
+
 # What's new in Microsoft Defender for Endpoint on Android
 
 
 Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://go.microsoft.com/fwlink/p/?linkid=2225630)
 
 ### Releases for Defender for Endpoint on Android
 
+#### November 2025
+
+| Build| 1.0.8303.0101|
+| -------- | -------- |
+| Release Date |November 4, 2025|
+
+**What's New**
+
+- An improved user feedback experience: See [Key changes - November 2025](./android-new-ux.md#key-changes---november-2025) for details.
+  
+- Additional telemetry features to improve app performance monitoring and detect specific scenarios, such as entering landscape mode or invalid authentication attempts.
+
 #### October 2025
 
 | Build| 1.0.8217.0101 |

defender-endpoint/defender-endpoint-demonstration-network-protection.md

@@ -1,6 +1,6 @@
 ---
 title: Microsoft Defender for Endpoint Network protection demonstrations
-description: Shows how Network protection prevents employees from using any application to access dangerous domains that may host phishing scams, exploits, and other malicious content on the Internet.
+description: Shows how Network protection prevents employees from using any application to access dangerous domains that might host phishing scams, exploits, and other malicious content on the Internet.
 search.appverid: met150
 ms.service: defender-endpoint
 ms.author: bagol
@@ -24,7 +24,7 @@ appliesto:
 ---
 # Network protection demonstrations
 
-Network Protection helps reduce the attack surface of your devices from Internet-based events. It prevents employees from using any application to access dangerous domains that may host phishing scams, exploits, and other malicious content on the Internet.
+Network Protection helps reduce the attack surface of your devices from Internet-based events. It prevents employees from using any application to access dangerous domains that might host phishing scams, exploits, and other malicious content on the Internet.
 
 ## Prerequisites
 
@@ -34,27 +34,27 @@ Network Protection helps reduce the attack surface of your devices from Internet
 
 ## Windows
 
-PowerShell command
+Run the following PowerShell command:
 
 ```powershell
 Set-MpPreference -EnableNetworkProtection Enabled
 ```
 
-Rule states
+Following are the Rule states:
 
 |State | Mode| Numeric value |
 |:---|:---|:---|
 | Disabled | = Off | 0 |
 | Enabled | = Block mode | 1 |
 | Audit | = Audit mode | 2 |
 
-Verify configuration
+Verify the configuration using the following PowerShell command:
 
 ```powershell
 Get-MpPreference
 ```
 
-Scenario
+**Consider the following scenario**:
 
 1. Turn on Network Protection using PowerShell command:
 
@@ -64,11 +64,11 @@ Scenario
 
 2. Using the browser of your choice (not Microsoft Edge*), navigate to the [Network Protection website test](https://smartscreentestratings2.net/). Microsoft Edge has other security measures in place to protect from this vulnerability (SmartScreen).
 
-Expected results
+Following are the expected results:
 
 Navigation to the website should be blocked and you should see a **Connection blocked** notification.
 
-Clean-up
+Run the following command to Clean-up:
 
 ```powershell
 Set-MpPreference -EnableNetworkProtection Disabled
@@ -90,27 +90,27 @@ For example, to configure network protection to run in blocking mode, execute th
 mdatp config network-protection enforcement-level --value block
 ```
 
-To confirm that network protection has been started successfully, run the following command from the Terminal, and verify that it prints "started":
+To confirm that network protection has started successfully, run the following command from the Terminal, and verify that it prints "started":
 
 
 ```bash
 mdatp health --field network_protection_status
 ```
 
-To test Network Protection on macOS/Linux
+To test Network Protection on macOS/Linux:
 
-1. Using the browser of your choice (not Microsoft Edge*), navigate to the [Network Protection website test](https://smartscreentestratings2.net/). Microsoft Edge has other security measures in place to protect from this vulnerability (SmartScreen).
-1. or from terminal 
+1. Using the browser of your choice (not Microsoft Edge), navigate to the [Network Protection website test](https://smartscreentestratings2.net/). Microsoft Edge has other security measures in place to protect from this vulnerability (SmartScreen).
+1. Or run the following command from the terminal: 
 
     ```bash
     curl -o ~/Downloads/smartscreentestratings2.net https://smartscreentestratings2.net/ 
     ```
 
-Expected results
+Following are the expected results:
 
 Navigation to the website should be blocked and you should see a **Connection blocked** notification.
 
-Clean-up
+Run the following command to Clean-up:
 
 ```bash
 mdatp config network-protection enforcement-level --value audit

defender-endpoint/deploy-manage-report-microsoft-defender-antivirus.md

@@ -1,6 +1,6 @@
 ---
 title: Deploy, manage, and report on Microsoft Defender Antivirus
-description: You can deploy and manage Microsoft Defender Antivirus with Intune, Microsoft Configuration Manager, Group Policy, PowerShell, or WMI
+description: You can deploy and manage Microsoft Defender Antivirus with Intune, Microsoft Configuration Manager, Group Policy, PowerShell, or WMI.
 ms.service: defender-endpoint
 ms.localizationpriority: medium
 ms.date: 10/20/2025
@@ -24,7 +24,6 @@ appliesto:
 ---
 # Deploy, manage, and report on Microsoft Defender Antivirus
 
-
 You can manage and report on Microsoft Defender Antivirus using one of several tools, such as:
 
 - [Deploy, manage, and report on Microsoft Defender Antivirus](#deploy-manage-and-report-on-microsoft-defender-antivirus)
@@ -33,8 +32,7 @@ You can manage and report on Microsoft Defender Antivirus using one of several t
   - [PowerShell](#powershell)
   - [Group Policy and Microsoft Entra ID](#group-policy-and-microsoft-entra-id)
   - [Windows Management Instrumentation](#windows-management-instrumentation)
-  - [See also](#see-also)
-
+  
 This article describes these options for deployment, management, and reporting.
 
 ## Prerequisites
@@ -74,7 +72,7 @@ For reporting, you can choose from several options:
 
 ## PowerShell
 
-You can use PowerShell with Group Policy or Configuration Manager to manage Microsoft Defender Antivirus on client devices. You can also use PowerShell to manage Microsoft Defender Antivirus manually on individual devices that are not managed by a security team. 
+You can use PowerShell with Group Policy or Configuration Manager to manage Microsoft Defender Antivirus on client devices. You can also use PowerShell to manage Microsoft Defender Antivirus manually on individual devices that aren't managed by a security team. 
 
 - Use the appropriate [Get- cmdlets available in the Defender module](/powershell/module/defender).
 
@@ -124,6 +122,6 @@ For reporting, Windows events comprise several security event sources, including
 
 
 > [!TIP]
-> **Performance tip** Due to a variety of factors, Microsoft Defender Antivirus, like other antivirus software, can cause performance issues on endpoint devices. In some cases, you might need to tune the performance of Microsoft Defender Antivirus to alleviate those performance issues. Microsoft's **Performance analyzer** is a PowerShell command-line tool that helps determine which files, file paths, processes, and file extensions might be causing performance issues. You can use the information gathered using Performance analyzer to better assess performance issues and apply remediation actions. See [Performance analyzer for Microsoft Defender Antivirus](tune-performance-defender-antivirus.md).
+> **Performance tip**: Due to various factors, Microsoft Defender Antivirus, like other antivirus software, can cause performance issues on endpoint devices. In some cases, you might need to tune the performance of Microsoft Defender Antivirus to alleviate those performance issues. Microsoft's **Performance analyzer** is a PowerShell command-line tool that helps determine which files, file paths, processes, and file extensions might be causing performance issues. You can use the information gathered using Performance analyzer to better assess performance issues and apply remediation actions. See [Performance analyzer for Microsoft Defender Antivirus](tune-performance-defender-antivirus.md).
 [!INCLUDE [Microsoft Defender for Endpoint Tech Community](../includes/defender-mde-techcommunity.md)]