Local AI Agent Defense: What Intune and Defender XDR Changed in June 2026

Microsoft added new preview controls for discovering, hunting, and blocking supported local AI agents on Windows endpoints.

June 20, 2026 · 4 min · Robel Mehari

Defender for Endpoint now surfaces local AI agents on Windows endpoints

Microsoft Defender now has preview capabilities for local AI agent discovery and runtime protection on supported endpoints.

June 19, 2026 · 3 min · Robel Mehari

Defender XDR: Move AI Agent Hunting Queries to AgentsInfo Before July 2026

Microsoft is moving AI agent inventory hunting from AIAgentsInfo to AgentsInfo, with the old table available until July 1, 2026.

June 18, 2026 · 3 min · Robel Mehari

Defender version compliance with Intune proactive remediations

A field note on using Intune proactive remediations to detect Microsoft Defender version drift, trigger updates, and keep evidence.

June 14, 2026 · 3 min · Robel Mehari

Local AI Agents in Microsoft Defender: visibility first, blocking later

A practical note on Microsoft Defender Local AI Agents, the AgentsInfo preview table, and why I would validate inventory before blocking anything.

June 13, 2026 · 4 min · Robel Mehari