MC1484009: Microsoft Defender for Office 365 Adds Email Submissions Data to Advanced Hunting

MWPRO IMPACT SCORE
OPERATIONAL IMPACT
43
0 25 50 75 100
MODERATE IMPACT • ASSESS BUSINESS IMPACT
Recommended Action:
Take a look and decide whether this affects your tenant, users or support teams.
▶ What is MWPro Impact Score? Watch our 60‑second explainer

Primary Audience

Security TeamsTenant AdminsMicrosoft 365 AdminsIT ManagersService Owners
Why this score?
AI Confidence
HIGH
Enough detail is available to trust this assessment.
Assessment Reasoning
This announcement introduces new Advanced Hunting tables for email submission data in Microsoft Defender for Office 365. The change enhances visibility and detection capabilities for SOC teams but does not require immediate configuration or action. Admins should plan to review the new tables and update hunting queries as needed. User impact is minimal as the change primarily affects backend analytics, not end-user workflows.
55
🛡️ Admin Impact
15
👥 User Impact
45
⚡ Urgency
40
🔧 Effort
ℹ️ WHAT YOU NEED TO KNOW
📌

AT A GLANCE

New email submissions data is coming to Advanced Hunting in Defender for Office 365, giving security teams better insight into email submission activity and results.
👥

END USERS

No major end-user change expected.
🛡️

IT ADMINS

Security teams may want to review the new SubmissionEvents and SubmissionResults tables once available.
📅

ROLLOUT TIMELINE

Upcoming:
October 2026

📢 Official Microsoft Message Center Announcement


Microsoft Defender for Office 365: New email submissions data in Advanced Hunting
Message ID: MC1484009

[What and Why:]

Microsoft Defender for Office 365 is introducing new email submissions data in Advanced Hunting in Microsoft Defender. The new submissions tables provide security operations teams with greater visibility into email submission activity and results, enabling analysts to query submission activity alongside other Defender data and build hunting and detection workflows tailored to their organization.

[Rollout Schedule:]

Public Preview (Worldwide): We will begin rolling out in early October 2026 and expect to complete by early October 2026.

General Availability (Worldwide): We will begin rolling out in early October 2026 and expect to complete by early October 2026.

[Impact on Your Organization:]

Who is affected:

– Security operations teams that use Advanced Hunting in Microsoft Defender.

– Admins and analysts who investigate email submissions and submission results.

Platforms/Services:

– Microsoft Defender for Office 365

– Microsoft Defender XDR

– Advanced Hunting

What will happen:

– Two new Advanced Hunting tables will be available: SubmissionEvents and SubmissionResults.

– SubmissionEvents provides information about email submission events.

– SubmissionResults provides information about the results associated with those submissions.

– Security teams can query submission information directly and correlate it with other Microsoft Defender XDR data.

– The tables can be used with Advanced Hunting custom detections, allowing organizations to create detections based on submission activity that is important to their SOC workflows.

[Action Required/Recommendations:]

No immediate action is required. Additional documentation for the new tables will be provided as part of the release.

[Compliance considerations:]

No compliance considerations identified. Review as appropriate for your organization.

Source: Microsoft Message Center • Analysed by MWPro

Share This Update