From 2f6604f7a8c7eff294217526424f7bad5ff2f476 Mon Sep 17 00:00:00 2001
From: Prem Kumar <85905240+PremMS-MDE@users.noreply.github.com>
Date: Wed, 30 Jul 2025 14:28:06 +0530
Subject: [PATCH] Update m365d-action-center.md

This update is based on support escalation requests coming in and to avoid future escalations or cases related to Action Center
---
 defender-xdr/m365d-action-center.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/defender-xdr/m365d-action-center.md b/defender-xdr/m365d-action-center.md
index f6ba434f14..d877664c59 100644
--- a/defender-xdr/m365d-action-center.md
+++ b/defender-xdr/m365d-action-center.md
@@ -97,6 +97,10 @@ All actions, whether they're pending approval or were already taken, are tracked
 
 In addition to remediation actions that are taken automatically as a result of [automated investigations](m365d-autoir.md), the Action center also tracks actions your security team has taken to address detected threats, and actions that were taken as a result of threat protection features in Microsoft Defender XDR. For more information about automatic and manual remediation actions, see [Remediation actions](m365d-remediation-actions.md).
 
+In Action Center, response actions are displayed only after they are completed. For example, while a file is being collected, it will not appear under the Pending tab. The Pending tab is reserved for actions that require user attention.
+
+
+
 ## Viewing action source details
 
 The improved Action center includes an **Action source** column that tells you where each action came from. The following table describes possible **Action source** values: