Microsoft August updates expand third-party data coverage in MDR: check service scope against your plan
Microsoft's August security update summary lists Defender Experts MDR coverage for third-party data connected through Sentinel and states that the capabilities are part of MDR P2. Organisations should still verify data connections, licensing and the scope of team involvement.
Source Facts
In a security product update summary published on 27 August, Microsoft said Defender Experts MDR could cover third-party data sources connected through Microsoft Sentinel, including AWS, Okta and Palo Alto Networks.
Microsoft lists this coverage under Defender Experts MDR P2 and describes intelligence services informed by region, industry and risk context. Data integration does not mean every licence or contract includes identical monitoring and response responsibilities.
When evaluating MDR, first list which signals people review and who can take which actions, then compare platform features.
Original sources
What’s new in Microsoft Security: August 2026
Sources checked: 2026-10-26 · Prepared with SI agent assistance; articles have not been individually reviewed by a person.
This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.
KEEP READING
Recommended reading
IllustrationOpenAI details training environment isolation improvements, using offline operation and continuous red teaming to constrain agents
IllustrationRuby patches a rule compilation issue: applications accepting user-defined rules should check their versions
Illustration