Services
Summary
The 'Investigation priority score' feature in Microsoft Defender is retiring, with the process starting in early November 2024 and ending late November 2024. Affected users should prepare by transitioning to the 'Entra risk score' feature, with resources provided for guidance.
Details
Updated September 17, 2024: We have updated the rollout timeline below. Thank you for your patience.
We are retiring the Investigation priority score feature from Microsoft Defender.
When this will happen:
Retirment will begin early November 2024 (previously mid-September 2024) and we expect to complete by late November 2024 (previously late October).
How this will affect your organization:
Security operations center (SOC) administrators and analysts will no longer be able to access, manage, or use Investigation priority score increase alerts in Microsoft Defender once this change is implemented.
What you need to do to prepare:
If this feature is used in your organization and is needed, we recommend using the Entra risk score feature. Please use the following resources for additional information:
- Investigate risk Microsoft Entra ID Protection - Microsoft Entra ID Protection | Microsoft Learn
- Microsoft Entra ID Protection risk-based access policies - Microsoft Entra ID Protection | Microsoft Learn