HANDS ON SharePoint
HANDS ON Teams
HANDS ON Lists
HANDS ON tek
M365 Admin
Retirement: Investigation priority score feature
The ‘Investigation priority score’ feature in Microsoft Defender is retiring from mid-September to late October 2024. SOC administrators and analysts will need to use ‘Entra risk score’ instead and are advised to consult provided Microsoft Entra ID Protection resources for preparation.
We are retiring the Investigation priority score feature from Microsoft Defender.
When this will happen:
Retirment will begin mid-September 2024 and we expect to complete by late October 2024.
How this will affect your organization:
Security operations center (SOC) administrators and analysts will no longer be able to access, manage, or use Investigation priority score increase alerts in Microsoft Defender once this change is implemented.
What you need to do to prepare:
If this feature is used in your organization and is needed, we recommend using the Entra risk score feature. Please use the following resources for additional information:
- Investigate risk Microsoft Entra ID Protection – Microsoft Entra ID Protection | Microsoft Learn
- Microsoft Entra ID Protection risk-based access policies – Microsoft Entra ID Protection | Microsoft Learn
Message ID: MC889532
