Apr 29, 2026: Trust Center detections (General availability)¶

The following Trust Center capabilities are now generally available:

• Detection findings: A new finding type to surface anomalous and potentially suspicious events. For more information, see Detections.

• Event-driven scanners: scanners that generate detection findings in response to relevant events, such as changes to sensitive parameters or sign-ins from unusual IP addresses, in addition to the existing schedule-based scanners. For more information, see Event-driven scanners.

• New scanners in the Threat Intelligence scanner package that report detection findings:

  • Authentication policy changes (event-driven)

  • Dormant user sign-ins (event-driven)

  • Entities with long-running queries (schedule-based)

  • Login protection (event-driven)

  • Sensitive parameter protection (event-driven)

  • Users with administrator privileges (schedule-based)

  • Users with unusual applications used in sessions (schedule-based)

To view detection findings in the Trust Center, see View Trust Center detection findings.