SecOps SignalSecurity Intelligence Workspace
Collection Degraded30 / 46 Sources HealthyPublic Intel Only
Source: Microsoft Defender for Identity - What's new · Limited verificationCanonical source
RECENTProduct updateAction required

Sensor updates

Analysis / inference: Microsoft Defender for Identity released sensor version 2.254 which introduces a required new DNS zone target for GCC environments.

Dates
Source and collection dates not recorded
Source
Microsoft Defender for Identity - What's new · Limited verification
Classification
Microsoft Security

Section 01 · Summary analysis

Sensor version 2.254 was released, introducing support for a new DNS zone target (*.atp.gcc.azure.com).

AI summary / analysis; claims are not independently verified. Check the primary source before acting.

Section 02 · Analysis

SecOps Signal analysis
Why it matters

Defenders must ensure MDI sensors deployed in GCC environments can resolve and communicate with the new DNS zone target to maintain uninterrupted threat detection and telemetry ingestion.

Operational impact

MDI sensors in GCC environments may experience connectivity disruptions or telemetry gaps if local DNS or network rules block the new zone target.

Section 03 · Recommended actions

  • Review existing network and DNS rule sets for MDI sensors.
  • Ensure the sensor DNS prefix allows access to *.atp.gcc.azure.com in GCC tenants.
What to check
  • Verify outbound firewall and DNS configurations for MDI sensors in GCC environments.
  • Confirm that sensors can successfully resolve and communicate with *.atp.gcc.azure.com.

Affected scope

ProductsDefender for Identity

Section 04 · References

1 public source