Merge branch 'main' of https://github.com/MicrosoftDocs/defender-docs-pr into wi488213-improve-text-for-permissions-add-to-graph

Author: sbreingold-ms

.openpublishing.publish.config.json

@@ -51,7 +51,7 @@
     },
     {
       "docset_name": "defender-cloud-apps",
-      "build_source_folder": "CloudAppSecurityDocs",
+      "build_source_folder": "defender-for-cloud-apps",
       "build_output_subfolder": "defender-cloud-apps",
       "locale": "en-us",
       "monikers": [],

.openpublishing.redirection.defender-cloud-apps.json

@@ -20,6 +20,11 @@
       "redirect_url": "/defender-endpoint/evaluate-mdav-using-gp",
       "redirect_document_id": false
     },
+    {
+      "source_path": "defender-endpoint/linux-install-with-activator.md",
+      "redirect_url": "/defender-endpoint/linux-custom-location-installation",
+      "redirect_document_id": false
+    },
     {
       "source_path": "defender-endpoint/preview.md",
       "redirect_url": "/defender-xdr/preview",

.openpublishing.redirection.defender-endpoint.json

@@ -96,7 +96,7 @@
     - name: Security, privacy, and compliance
       href: mdb-security-privacy-compliance.md
     - name: Top 10 ways to secure your business data
-      href: /Microsoft-365/business-premium/secure-your-business-data?bc=%2Fdefender-business%2Fbreadcrumb%2Ftoc.json&toc=%2Fdefender-business%2Ftoc.json
+      href: /microsoft-365/admin/security-and-compliance/m365b-security-best-practices?bc=%2Fdefender-business%2Fbreadcrumb%2Ftoc.json&toc=%2Fdefender-business%2Ftoc.json
     - name: How to get help or contact support
       href: /microsoft-365/admin/get-help-support
     - name: Frequently asked questions

defender-business/TOC.yml

@@ -86,7 +86,7 @@ When Microsoft Defender Antivirus detects threat, the following things happen:
 
 - Users receive [notifications in Windows](https://support.microsoft.com/windows/8942c744-6198-fe56-4639-34320cf9444e).
 - Detections are listed in the [Windows Security app](/windows/security/operating-system-security/system-security/windows-defender-security-center/windows-defender-security-center) on the **Protection history** page.
-- If you [secured your Windows devices](/microsoft-365/business-premium/m365bp-protect-managed-devices), the threat detections and insights are available on the **Threats and antivirus** page in the Microsoft 365 admin center at <https://admin.microsoft.com/Adminportal/Home#/activethreats>.
+- If you [secured your Windows devices](/microsoft-365/admin/security-and-compliance/m365bp-devices-enrollment), the threat detections and insights are available on the **Threats and antivirus** page in the Microsoft 365 admin center at <https://admin.microsoft.com/Adminportal/Home#/activethreats>.
 
   > [!TIP]
   > In Microsoft 365 Business Premium, if you have more than 800 devices [enrolled in Microsoft Intune](/intune/intune-service/fundamentals/deployment-guide-enroll), you're prompted to view threat detections and insights from Microsoft Intune instead of from the **Threats and antivirus** page.

defender-business/mdb-manage-devices.md

@@ -37,7 +37,7 @@ For information, see the [Microsoft Trust Center - Security](https://www.microso
 For related configuration information, see the following articles:
 
 - [Set up and configure Microsoft Defender for Business](mdb-setup-configuration.md)
-- [Microsoft 365 for business security best practices](/microsoft-365/business-premium/secure-your-business-data)
+- [Microsoft 365 for business security best practices](/microsoft-365/admin/security-and-compliance/m365b-security-best-practices)
 
 ## Privacy
 

defender-business/mdb-security-privacy-compliance.md

@@ -2,8 +2,8 @@
 title: User experiences in Microsoft Defender for Endpoint on Android
 description: Learn about the newest updates to Microsoft Defender for Endpoint on Android.
 ms.service: defender-endpoint
-ms.author: bagol
-author: batamig
+ms.author: painbar
+author: paulinbar
 ms.localizationpriority: medium
 manager: bagol
 ms.reviewer: denishdonga
@@ -15,29 +15,67 @@ ms.collection:
 ms.topic: reference
 ms.subservice: android
 search.appverid: met150
-ms.date: 03/19/2025
+ms.date: 09/16/2025
 ---
 
 # User experiences in Microsoft Defender for Endpoint on Android
 
-As part of our ongoing commitment to deliver exceptional user experiences, we're excited to announce a series of upcoming changes to the user interface and overall experience of our **Microsoft Defender for Endpoint (MDE)** mobile app.
+As part of our ongoing commitment to deliver exceptional user experiences, we're excited to announce a series of upcoming changes to the user interface and overall experience of our **Microsoft Defender for Endpoint** mobile app.
 
-The new updates are designed to improve usability, streamline navigation, and ensure our app meets the evolving needs of our users.
+The new enhancements are designed to improve usability, streamline navigation, and ensure our app meets the evolving needs of our users.
 
-## Key Changes
+## Key changes - September 2025
 
+We're pleased to introduce the new Onboarding screens that come up when the user starts onboarding after sign-in.
+
+The primary changes are as follows:
+
+-  [EULA screen revamp](#eula-screen-revamp)
+-  [Permission consolidation screen changes](#permission-consolidation-screen-changes)
+-  [Intermediate screens during permission flow](#intermediate-screens-that-come-up-during-the-permission-flow)
+
+### EULA screen revamp
+
+:::image type="content" source="media/android-new-ux/eula-screen-light.png" alt-text="Screenshot showing EULA screen after redesign in light mode." border="false":::
+
+### Permission consolidation screen changes
+
+:::image type="content" source="media/android-new-ux/permissions-consolidation-light.png" alt-text="Permission consolidation screen after redesign in light mode." border="false":::
+
+#### New bottom sheet for permission information
+
+:::image type="content" source="media/android-new-ux/permissions-information.png" alt-text="Permissions information bottom sheet." border="false":::
+
+### Optional VPN consent screen
+
+:::image type="content" source="media/android-new-ux/vpn-consent-screen-light.png" alt-text="Optional VPN consent screen in light mode." border="false":::
+
+### Intermediate screens that come up during the permission flow
+
+These are the following screens that have been shifted from old Enterprise screen to new look and feel screens similar to the consumer screens.
+
+#### Network Protection consent screen
+
+:::image type="content" source="media/android-new-ux/np-consent-screen-light.png" alt-text="NP consent screen in light mode." border="false":::
+
+#### Microsoft Defender Vulnerability Management consent screen
+
+:::image type="content" source="media/android-new-ux/discover-vulnerable-apps-consent-screen-light.png" alt-text="Discover vulnerable apps consent screen in light mode." border="false":::
+
+## Key changes - March 2025
+ 
 We're pleased to introduce the Device Protection feature card for our enterprise users which includes **App Security**, **Web Protection**, **Security History** features are designed to be more user-friendly and accessible.
 
 The updated **feature cards** also include recommendation cards, which prominently display any active alerts, ensuring you stay informed. Features are now displayed as tiles on L2 screens to improve user experience and navigation efficiency.
 
-**The primary changes are as follows**:
+The primary changes are as follows:
 
-1. Main Dashboard changes
-1. List the features inside one Feature Card
-1. Detailed Feature Experience
-1. Alerts
+- [Main dashboard changes](#main-dashboard-changes)
+- [List the features inside one feature card](#list-the-features-inside-one-feature-card)
+- [Detailed feature experience](#detailed-feature-experience)
+- [Alerts](#alerts)
 
-### Main Dashboard changes
+### Main dashboard changes
 
 The following image shows the main Dashboard screen that appears to the enterprise's users as per our latest rollout of enhancements to the application. The following image illustrates the previous and new version of the main dashboard.
 
@@ -49,7 +87,7 @@ The **App Security** and **Web Protection** features are now consolidated under
 
 :::image type="content" source="media/mde-android-list.png" alt-text="Screensot showing the Microsoft Defender for Endpoint Feature Card before the new updates." lightbox="media/mde-android-list.png":::
 
-### Detailed Feature Experience
+### Detailed feature experience
 
 We updated all the subordinating screens associated with the feature
 

defender-endpoint/android-new-ux.md

@@ -15,7 +15,7 @@ ms.collection:
 ms.topic: install-set-up-deploy
 ms.subservice: linux
 search.appverid: met150
-ms.date: 09/04/2025
+ms.date: 09/16/2025
 ---
 
 # Deploy Microsoft Defender for Endpoint on Linux using golden images
@@ -27,7 +27,7 @@ ms.date: 09/04/2025
 - Microsoft Defender for Endpoint for servers
 - Microsoft Defender for Servers Plan 1 or Plan 2
 
-Golden images are preconfigured virtual machine templates used to rapidly deploy consistent environments. Microsoft Defender for Endpoint on Linux supports golden image deployment across cloud and on-premises environments, with improved handling of machine identifiers and hostnames, ensuring reliable telemetry and device correlation.
+Golden images are preconfigured virtual machine templates used to rapidly and consistently deploy multiple identical systems across an organization. Microsoft Defender for Endpoint on Linux supports golden image deployment across cloud and on-premises environments, with improved handling of machine identifiers and hostnames, ensuring reliable telemetry and device correlation.
 
 This guide walks you through: