MC889532 - Retirement: Investigation priority score feature

Message Center

This announcement expired on Dec 9, 2024 and is no longer active in Message Center.

Summary

The 'Investigation priority score' feature in Microsoft Defender is retiring, with the process starting in early November 2024 and ending late November 2024. Affected users should prepare by transitioning to the 'Entra risk score' feature, with resources provided for guidance.

Last Updated

Sep 19, 2024

Published Sep 13, 2024

View version history

Service

Microsoft Defender XDR

Tag

Major change
Updated message
Admin impact
Retirement

More information

Updated September 17, 2024: We have updated the rollout timeline below. Thank you for your patience.

We are retiring the Investigation priority score feature from Microsoft Defender.

When this will happen:

Retirment will begin early November 2024 (previously mid-September 2024) and we expect to complete by late November 2024 (previously late October).

How this will affect your organization:

Security operations center (SOC) administrators and analysts will no longer be able to access, manage, or use Investigation priority score increase alerts in Microsoft Defender once this change is implemented.

What you need to do to prepare:

If this feature is used in your organization and is needed, we recommend using the Entra risk score feature. Please use the following resources for additional information:

Version history

3 versions tracked

Updated 2 times since Sep 13, 2024. Microsoft Message Center only ever shows the current version; this archive preserves the history.

Compare any two versions

From
To
  1. Sep 19, 2024 · 12:34 AMLatest · v3

    Changed: Services

  2. Sep 19, 2024 · 12:34 AMv2

    Changed: Body, Tags

  3. Sep 13, 2024 · 10:37 PMOriginal · v1

    Changed: Initial version