Merge pull request #3229 from MicrosoftDocs/alert-policies-xdr

Alert policies in Defender XDR - Dianne and Chris to review

Author: diannegali

defender-xdr/TOC.yml

@@ -460,6 +460,8 @@
       items:
         - name: Microsoft Defender XDR FAQs
           href: m365d-enable-faq.md      
+        - name: Alert policies
+          href: alert-policies.md
         - name: Audit activities and events
           href: microsoft-xdr-auditing.md
         - name: Configure email notifications

defender-xdr/alert-policies.md

@@ -18,7 +18,7 @@ ms.topic: conceptual
 search.appverid:
   - MOE150
   - met150
-ms.date: 1/27/2025
+ms.date: 3/25/2025
 appliesto:
 - Microsoft Defender XDR
 ---
@@ -58,6 +58,7 @@ You can filter alerts according to these criteria:
 - Product name
 - Entities (the impacted assets)
 - Automated investigation state
+- Workspace
 - Data stream (workload or location)
 
 > [!NOTE]