SecOps SignalSecurity Intelligence Workspace
Collection Degraded30 / 46 Sources HealthyPublic Intel Only
Source: Microsoft Defender for Cloud recommendations and alerts · Limited verificationCanonical source
RECENT

Retirement of legacy grouped recommendations (sub-assessments) has started

Analysis / inference: Microsoft Defender for Cloud has initiated the retirement of legacy grouped recommendations and sub-assessments.

Published
31 Jul 2026, 05:30 AM IST
Source
Microsoft Defender for Cloud recommendations and alerts · Limited verification
Classification
Microsoft Security

Section 01 · Summary analysis

Analysis / inference: The retirement of legacy grouped recommendations alters how security posture data is retrieved through APIs, potentially breaking automated scripts or dashboards that query old sub-assessment endpoints.

AI summary / analysis; claims are not independently verified. Check the primary source before acting.

Section 02 · Analysis

SecOps Signal analysis
Operational impact

Analysis / inference: Automation scripts or reports querying the retired sub-assessment data structures will fail until updated to individual recommendations.

Section 03 · Recommended actions

  • Transition all workflows and tooling from grouped recommendations to individual recommendations as outlined in Microsoft documentation.
What to check
  • Review API queries, scripts, and Azure Resource Graph queries to verify they no longer depend on legacy grouped recommendation endpoints or sub-assessments.

Affected scope

ProductsDefender for Cloud

Section 04 · References

1 public source