October 8, 2026 SaaS Alerts release notes
Ask AI - MSFT Agent
Enhancements
Teams responses now use your local time zone
Times displayed in Teams responses now use the time zone reported by your Teams client instead of UTC. When an exact timestamp is important, such as for auditing or log searches, the corresponding UTC time is also included.
Faster sign-in details in investigations
Investigations that retrieve authentication details for individual sign-ins now complete significantly faster and more reliably. Reports can now retrieve authentication information for additional sign-in types, including background and application sign-ins.
Faster handling of Microsoft 365 request rejections
When Microsoft 365 rejects a request, the assistant now receives and processes the response immediately instead of retrying until a timeout occurs. Retries are still used when services are temporarily unavailable.
Fixes
Correct license assignment totals
License assignment totals now correctly reflect the total number of assigned licenses and match the values shown in detailed results.
Improved Intune compliance investigations
Investigations into Intune compliance issues now provide more reliable results and identify the policy setting responsible for a compliance failure when available.
More reliable Intune policy creation and copying
Creating and copying Intune policies is now more reliable. Issues that could cause policy creation or duplication to fail due to missing values or template references have been resolved.
Expanded Intune policy discovery
When searching for Intune policies, the assistant now checks across multiple policy types, including update rings, feature and quality update profiles, compliance policies, and administrative templates.
Improved policy name matching
Conditional Access and Intune policies can now be found when differences are limited to capitalization, spacing, or trailing spaces.
Clearer expired approval notifications
If a pending approval has expired, the assistant now clearly indicates that the requested change was not made and identifies the affected action.
Improved reporting for interrupted responses
When an AI-generated response is interrupted, the assistant now informs you that the response was cut short and clarifies that any completed actions remain in effect.
Improved file activity investigations
File activity investigations using SharePoint links now return more reliable results by improving how file references are matched in audit logs.
More accurate audit event counts
Duplicate audit events are now filtered from results, improving event counts and reporting accuracy.
Enhanced DLP rule investigations
The assistant can now retrieve and analyze larger Data Loss Prevention (DLP) rules and more reliably locate rules referenced by alerts or message traces.
Faster security alert investigations
Retrieving evidence associated with Microsoft security alerts now completes significantly faster and is less likely to time out.
More complete mail flow rule reporting
Mail flow rule investigations now process large rule sets more thoroughly, helping ensure all applicable rules are included in results.
Improved reporting of SMS and voice authentication status
When SMS and voice authentication methods are disabled through authentication methods policies, the assistant now reports them as disabled more accurately and reduces unnecessary warnings related to legacy authentication settings.
