MicrosoftDocs/entra-docs/docs/id-protection

Remove straggler ms.author and author fields for MSec files (#14465)

Map ID Protection diagnostic categories to Log Analytics tables Transfer the contributor-authored change from MicrosoftDocs/entra-docs#2099 to the private authoring repository. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Update attacker-added device remediation details Clarified the remediation flow for attacker-added devices by specifying that the Entra device object is disabled, blocking new token issuance.

Revise attacker-added device risk remediation details Updated the description of the device disablement control to specify that the Entra device object is disabled and blocks new token issuance.

Update identity protection policies with device disablement Added details about device disablement in risk remediation section.

Merge pull request #13627 from shlipsey3/idp-sspr-clarification-062326 idp-sspr-clarification-062326

idp-unified-risk-061726 (#13538) * idp-unified-risk-061726 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * PM-review-GA-updates * toc --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

edit

idp-sspr-clarification-062326 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Remove preview tag for ARR (now GA)

agent-ga-detections-052926 (#13303) * agent-ga-detections-052926 - Remove (Preview) from ID Protection for agents title and agent detections heading - Remove 'Sign-in by risky user' detection (replaced by user-risk attribution model) - Add NOTE explaining OBO vs autonomous flow risk attribution - Update ms.date Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Revise agent risk documentation and licensing details Updated licensing information and clarified risk detection descriptions for agents in the ID Protection documentation. * Update note on risky agent activity attribution Clarify attribution of risky activity in OBO flows and specify that risk detections apply only to autonomous agent activity. * license-updates * metadata * Update risk detection table for agents * Update agent risk detection table format * Update risky agents documentation Removed note about OBO flows and user attribution of risky activity. * Clarify Learning Mode functionality in ID Protection Updated the description of Learning Mode in ID Protection for agents to clarify its role in suppressing behavioral alerts and ensuring detection of malicious behavior. * nudge * cleanup * update * Fix punctuation in risk detection description Added a period to the end of the description for 'Confirmed compromised' risk detection. * PR-review-fixes --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: ebasseri <39064520+ebasseri@users.noreply.github.com>

[BULK UPDATE] User Story 573314: Ensure every doc in MSec repos has an author from MSec Docs (entra-docs-pr 9) (#13413) * [BULK UPDATE] User Story 573314: Ensure every doc in MSec repos has an author from MSec Docs (entra-docs-pr 9) * Remove from individual files

status (#13356) Co-authored-by: OpenPublishing.Build <opbuild@microsoft.com>

Update title to indicate preview status

Update concept-risk-detection-types.md

ca-agents-build-060226

headings

fine-tune

edits

doc-authoring-pass