Local AI Agent Defense: What Intune and Defender XDR Changed in June 2026
Microsoft added new preview controls for discovering, hunting, and blocking supported local AI agents on Windows endpoints.
Microsoft added new preview controls for discovering, hunting, and blocking supported local AI agents on Windows endpoints.
Microsoft Defender now has preview capabilities for local AI agent discovery and runtime protection on supported endpoints.
Microsoft is moving AI agent inventory hunting from AIAgentsInfo to AgentsInfo, with the old table available until July 1, 2026.
A field note on using Intune proactive remediations to detect Microsoft Defender version drift, trigger updates, and keep evidence.
A practical note on Microsoft Defender Local AI Agents, the AgentsInfo preview table, and why I would validate inventory before blocking anything.