Resolve syncing conflicts from repo_sync_working_branch to main

.openpublishing.publish.config.json

@@ -45,6 +45,12 @@
       "url": "https://github.com/MicrosoftDocs/reusable-content",
       "branch": "main",
       "branch_mapping": {}
+    },
+    {
+      "path_to_root": "security-docs/includes/entra-content",
+      "url": "https://github.com/MicrosoftDocs/entra-docs-pr",
+      "branch": "main",
+      "branch_mapping": {}
     }
   ],
   "branch_target_mapping": {

.openpublishing.redirection.json

@@ -1,5 +1,15 @@
 {
   "redirections": [
+    {
+      "source_path": "security-docs/zero-trust/siem-xdr-training.md",
+      "redirect_url": "security/zero-trust/security-adoption-discipline-architecture-tips",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "security-docs/zero-trust/ten-laws-of-security.md",
+      "redirect_url": "security/zero-trust/security-adoption-discipline-security-operations",
+      "redirect_document_id": false
+    },
     {
       "source_path": "security-docs/zero-trust/zero-trust-assessment-progress-tracking-resources.md",
       "redirect_url": "security/zero-trust/assessment/get-started",
@@ -674,6 +684,36 @@
       "source_path": "security-docs/zero-trust/data-compliance-gov-data.md",
       "redirect_url": "/security/zero-trust/deploy/data",
       "redirect_document_id": false
+    },
+    {
+      "source_path": "security-docs/trusted-root/Audit-Requirements.md",
+      "redirect_url": "https://github.com/TrustedRootProgram/Program-Requirements",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "security-docs/trusted-root/Testing.md",
+      "redirect_url": "https://github.com/TrustedRootProgram/Program-Requirements/blob/main/Testing%20Instructions.md",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "security-docs/trusted-root/Incident-Reporting.md",
+      "redirect_url": "https://github.com/TrustedRootProgram/Program-Requirements/blob/main/Incident-Reporting.md",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "security-docs/trusted-root/Participants-list.md",
+      "redirect_url": "https://github.com/TrustedRootProgram/Program-Requirements/blob/main/Participants%20List.md",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "security-docs/trusted-root/new-ca-application.md",
+      "redirect_url": "https://github.com/TrustedRootProgram/Program-Requirements",
+      "redirect_document_id": false
+    },
+    {
+      "source_path": "security-docs/trusted-root/deprecation.md",
+      "redirect_url": "https://github.com/TrustedRootProgram/Program-Requirements",
+      "redirect_document_id": false
     }
   ]
-}
+}

security-docs/challenge/defender-challenge.md

@@ -0,0 +1,95 @@
+---
+title: Microsoft Defender Challenge
+description: This article provides information about the Microsoft Defender Challenge.
+ms.service: security
+ms.topic: concept-article
+ms.author: ralyon
+author: raelyon
+ms.date: 07/29/2026
+ai-usage: ai-assisted
+---
+
+# Microsoft Defender Challenge
+
+![Security credentials banner with text that says defend skill up get certified.](/security/media/challenge/hero-credentials-with-text.png)
+
+Complete the Microsoft Defender Skilling Challenge and submit an entry for a chance to win one of 500 50%-discounted SC-200 or SC-500 Microsoft Certification exam vouchers. Challenge entry period: July 20-August 21, 2026.
+
+> [!div class="nextstepaction"]
+> [Start the challenge](/challenges/6381s7tkn541nz)
+
+## About the challenge
+
+The Microsoft Defender Skilling Challenge is your opportunity to deepen your expertise across the Microsoft Defender product family - including Microsoft Defender XDR, Microsoft Sentinel, and Microsoft Defender for Cloud. Work through curated learning modules, sharpen your security skills, and enter the sweepstakes for a chance to earn a discounted Microsoft Certification exam voucher toward the SC-200 or SC-500 exam.
+
+## Learn Live: Remediating Threats Using Microsoft Defender
+
+Join the free Microsoft Learn Live session **"Remediating Threats Using Microsoft Defender"** on **August 19, 2026**. This interactive session provides hands-on guidance on investigating incidents, remediating threats, and automating response actions across Microsoft Defender capabilities — a great complement to the challenge content.
+
+[Register for the Learn Live event](https://reactor.microsoft.com/reactor/events/27333/)
+
+## How to enter
+
+No purchase necessary.
+
+Steps:
+
+1. Register for and complete the Microsoft Defender Skilling Challenge on Microsoft Learn before August 21, 2026 at 11:59 PM UTC. 
+1. After completing the challenge, submit your entry via the official sweepstakes entry form before the deadline. 
+1. If selected as a winner, you will be contacted by MindhubPro by Pearson VUE via email with your voucher code and redemption instructions.  
+
+> [!div class="nextstepaction"]
+> [Submit your entry](https://forms.office.com/Pages/ResponsePage.aspx?id=v4j5cvGGr0GRqy180BHbR-BLGqyJXPlNlWysrop3YH1UQ1FCWDdNOUhOSFgwTE80UUpCUzFUQ1hRUi4u)
+
+## Win a certification exam voucher
+
+Complete the challenge and enter the sweepstakes for a chance to win one of 500 50%-discounted Microsoft Certification exam vouchers. Eligible for the following exams:  
+
+- SC-200: Security Operations Analyst
+- SC-500: Cloud and AI Security Engineer
+
+| Detail | Value |
+|--------|-------|
+| Vouchers available | 500 |
+| Discount | 50% off exam price  |
+| Entry period closes | August 21, 2026 at 11:59 PM UTC  |
+| Winners drawn | August 24-31, 2026 |
+| Vouchers issued by | MindhubPro by Pearson VUE |
+| Voucher expiration | June 30, 2026 |
+
+> [!div class="nextstepaction"]
+> [View official rules](/credentials/support/microsoft-defender-challenge-sweepstakes-terms-and-conditions)
+
+## Explore Microsoft Defender learning topics
+
+Get started with the topics covered in the challenge. Each card links to official Microsoft Learn content.
+
+### Prepare for the SC-200 certification
+
+Validate your skills in threat detection, investigation, and response using Microsoft Defender XDR, Microsoft Sentinel, and Microsoft Defender for Cloud. Start with a practice assessment to benchmark your readiness — then use the study guide to close any gaps before exam day.
+
+[Learn more](/credentials/certifications/security-operations-analyst/?practice-assessment-type=certification)
+
+### Prepare for the SC-500 certification
+
+Get exam-ready for the Cloud and AI Security Engineer Associate certification. Build expertise in securing cloud workloads, managing AI security risks, and implementing Zero Trust principles across the Microsoft security platform.
+
+[Learn more](/credentials/certifications/cloud-and-ai-security-engineer-associate/?practice-assessment-type=certification)
+
+### Stay current with Microsoft Defender XDR
+
+Keep pace with the latest innovations in Microsoft Defender XDR - new detection capabilities, unified incident response features, and expanded coverage across identities, endpoints, email, and cloud apps.
+
+[See what's new](/defender-xdr/whats-new)
+
+### Microsoft Sentinel best practices
+
+Explore expert guidance for deploying and operating Microsoft Sentinel at scale. From workspace architecture and data connector strategies to analytics rules and incident response workflows - build a mature SIEM/SOAR practice.
+
+[Explore best practices](/azure/sentinel/best-practices)
+
+### Manage and respond to security alerts
+
+Learn how to investigate, triage, and respond to security alerts in Microsoft Defender for Cloud. Understand how to work alerts in context, suppress false positives, and take automated or manual remediation actions to protect your cloud workloads.
+
+[Learn more](/azure/defender-for-cloud/manage-respond-alerts)

security-docs/docfx.json

@@ -47,8 +47,8 @@
       "breadcrumb_path": "/security/breadcrumb/toc.json",
       "feedback_system": "Standard",
       "feedback_help_link_type": "get-help-at-qna",
-      "ms.author": "kenwith",
-      "author": "kenwith"
+      "ms.author": "raynew",
+      "author": "rayne-wiselman"
     },
     "fileMetadata": {
       "titleSuffix": {

security-docs/index.yml

@@ -8,64 +8,20 @@ metadata:
   ms.topic: marketing-hub
   ms.author: saadad
   author: sadadow
-  ms.date: 05/05/2026
+  ms.date: 08/04/2026
   ms.collection: # na
   brand: azure
 sections:
   # Intro
   # Hero with background image - default transform
   - componentType: hero-learn
-    supertitle: Microsoft Learn
     title: Microsoft Security 
   # size: small
     summary: "Empower your organization with AI-driven cybersecurity. Microsoft's integrated security solutions built on Zero Trust principles help you stay ahead of evolving risks. Learn how to predict and protect against threats with Microsoft Defender and Microsoft Sentinel, protect workloads and AI with Microsoft Defender for Cloud. Secure AI with Microsoft Security Copilot, Microsoft Entra, and Microsoft Purview. Explore our curated resources on the Security hub." 
     heroImage:
      componentType: hero-image
      lightImageSrc: /security/media/security-hub/hero-security-hub.png
      darkImageSrc: /security/media/security-hub/hero-security-hub.png
-# Spotlight selections
-#  - componentType: testimonials-section
-#    title: 'Discover top picks'
-#    cards:
-#      - avatarUrl: /security/media/hubpage/applied-skills.png
-#        componentType: testimonial-card
-#        name: Secure AI solutions in the cloud
-#        role: Applied Skills
-#        feedback: Validate your technical skills and open doors to new possibilities of advancement with Microsoft Defender for Cloud and Microsoft Foundry.
-#        link:
-#          componentType: link
-#          url: /credentials/applied-skills/secure-ai-solutions-in-the-cloud/
-#          text: Start learning
-#      - avatarUrl: /security/media/hubpage/applied-skills.png
-#        componentType: testimonial-card
-#        name: Get started with identities and access using Microsoft Entra
-#        role: Applied Skills
-#        feedback: Open doors to new possibilities of advancement by demonstrating your ability to manage identities and access in Microsoft Entra.
-#        link:
-#          componentType: link
-#          url: /credentials/applied-skills/get-started-with-identities-and-access-using-microsoft-entra/
-#          text: Validate your skills
-#      - avatarUrl: /security/media/hubpage/document-icon.png 
-#        componentType: testimonial-card
-#        name: Microsoft Security Copilot for Developers
-#        role: Documentation
-#        feedback: Learn to create, publish, and test agents in Security Copilot using natural language, lite experience forms, YAMLs, and MCPs. Designed for developers to streamline security workflows.
-#        link:
-#          componentType: link
-#          url: /copilot/security/developer/
-#          text: Get started
-#      - avatarUrl: /security/media/hubpage/generic-badge.svg
-#        componentType: testimonial-card
-#        name: Mitigate incidents using Microsoft Defender
-#        role: Training
-#        feedback: Learn how the Microsoft Defender portal provides a unified view of incidents from the Microsoft Defender family of products.
-#        link:
-#          componentType: link
-#          url: /training/modules/mitigate-incidents-microsoft-365-defender/
-#          text: Learn more
-#    backgroundImage:
-#      lightImageSrc: /copilot/media/copilot/copilot-learning-hub/spotlight-background-clear.png
-#      darkImageSrc: /copilot/media/copilot/copilot-learning-hub/spotlight-background-clear.png
 
 # New top picks tiles from 4 February 2026
   - componentType: markdown
@@ -77,38 +33,80 @@ sections:
         :::column-end:::
       :::row-end:::
 
+# August 20 tile 2 swap for loop tile 5 (commented out below)
+# August 21 tile 1 swap for tile 4 (tile 4 replacement?)
   - componentType: grid
     title: ""
     blocks:
       - componentType: icon-card
-        title: Secure autonomous agentic AI systems
-        summary: Apply solutions to operationalize mitigation across identity, governance, runtime enforcement, and detection.
-        url: /security/zero-trust/sfi/secure-agentic-systems
+        title: Enter the Microsoft Defender Challenge
+        summary: Complete the challenge and submit your sweepstakes entry for a chance to win a 50%-discounted voucher for a security certification by August 21, 2026.
+        url: /security/challenge/defender-challenge
         icon:
           componentType: image
-          src: /security/media/hubpage/ignite-glyphs/concept-1-yellow.png
+          src: /security/media/hubpage/ignite-glyphs/announcements-2-orange.png
+      - componentType: icon-card
+        title: Remediate Threats using Microsoft Defender 
+        summary: Join us August 19 for a Learn Live session, where you'll see how Microsoft Defender for Office 365 helps you investigate, contain, and remediate modern attacks.
+        url: https://aka.ms/LearnLive819/f
+        icon:
+          componentType: image
+          src: /security/media/hubpage/calendar-event-icon.png
+#      - componentType: icon-card
+#        title: Enable Microsoft Security Adoption
+#        summary: Get the resources, skilling, and community to help you adopt Microsoft Security.
+#        url: https://adoption.microsoft.com/en-us/microsoft-security/
+#        icon:
+#          componentType: image
+#          src: /security/media/hubpage/ignite-glyphs/concept-1-yellow.png
+      - componentType: icon-card
+        title: Protect AI assets with Microsoft Defender
+        summary: Explore documentation on how Defender delivers discovery, posture, threat detection, investigation, and real-time protection for the AI agents in your tenant, including Copilot Studio.
+        url: /defender-xdr/security-for-ai/defender-security-for-ai
+        icon:
+          componentType: image
+          src: /security/media/hubpage/ignite-glyphs/overview-magenta.png
       - componentType: icon-card
-        title: "Quickstart: Build agents using MCP tools (Security Copilot)"
-        summary: Build a Security Copilot agent that calls MCP tools — quickstart with sample code.
-        url: /copilot/security/developer/mcp-quickstart
+        title: Restore your tenant to a productive and secure state with Microsoft Entra Backup and Recovery
+        summary: Learn to recover critical Microsoft Entra directory objects to a previously known good state after accidental changes or security compromises.
+        url: /entra/backup/overview
+        icon:
+          componentType: image
+          src: /security/media/hubpage/ignite-glyphs/get-started-1-blue.png
+
+# Put security into practice
+  - componentType: grid
+    title: Put security into practice
+    summary: Move from reading to improving your security posture. Explore practice-based quickstarts, tutorials, and guided modules that help you deploy, configure, and validate protections with Microsoft Security—so you can make meaningful progress in your environment, one focused step at a time.
+    blocks:
+      - componentType: icon-card
+        title: "Quickstart: Helm install for Defender for Containers"
+        summary: Deploy the Defender for Containers sensor with Helm.
+        url: /azure/defender-for-cloud/deploy-helm
         icon:
           componentType: image
           src: /security/media/hubpage/ignite-glyphs/quickstart-2-rainbow.png
       - componentType: icon-card
-        title: AI Agent Service Security Controls
+        title: "Tutorial: Defender for Cloud + GHAS sandbox"
+        summary: Try Defender for Cloud +GHAS in a sandbox before you roll it out.
+        url: /azure/defender-for-cloud/github-advanced-security-deploy-sandbox
+        icon:
+          componentType: image
+          src: /security/media/hubpage/ignite-glyphs/tutorial-1-purple.png
+      - componentType: icon-card
+        title: "Module: AI Agent Service Security Controls"
         summary: Configure RBAC and security controls for Azure AI Agent Service in this 20-minute module.
         url: /training/modules/intro-ai-agent-service-security-controls/
         icon:
           componentType: image
           src: /security/media/hubpage/ignite-glyphs/training-1-purple.png
       - componentType: icon-card
-        title: Get In the Loop
-        summary: Catch up on the latest product drops, security updates, and demos—all in one place.
-        url: https://aka.ms/SecurityProductDrops_May26
+        title: "Documentation: Security Analyst Agent in Defender"
+        summary: Investigate with the Security Analyst Agent to quickly identify, assess, and prioritize risks.
+        url: /defender-xdr/security-analyst-agent
         icon:
           componentType: image
-          src: /security/media/hubpage/ignite-glyphs/whats-new-1-magenta.png
-
+          src: /security/media/hubpage/ignite-glyphs/how-to-guide-2-orange.png
 
 # Modules
 #  - componentType: cards
@@ -160,28 +158,28 @@ sections:
         url: /training/paths/ai-security-fundamentals/?wt.mc_id=securityhub_fundamentals_webpage_sci
         icon:
           componentType: image
-          src: /security/media/hubpage/generic-trophy.svg
+          src: /security/media/hubpage/ignite-glyphs/training-1-purple.png
       - componentType: icon-card
         title: Understand data security investigations
         summary: Learn concepts that define data security investigations, how they differ from alerts and audit, and when deeper, data-focused investigation adds value to security decisions.
         url: /training/modules/purview-data-security-investigations-understand/?wt.mc_id=securityhub_securityinvestigations_webpage_sci
         icon:
           componentType: image
-          src: /security/media/hubpage/generic-badge.svg
+          src: /security/media/hubpage/ignite-glyphs/tutorial-1-purple.png
       - componentType: icon-card
         title: Mitigate incidents using Microsoft Defender
         summary: Investigate and respond to incidents using Microsoft Sentinel and Defender XDR. Correlate alerts, hunt threats, manage incidents, and stop attacks faster with unified security operations workflows.
         url: /training/modules/mitigate-incidents-microsoft-365-defender/?wt.mc_id=securityhub_defendertraining_webpage_sci
         icon:
           componentType: image
-          src: /security/media/hubpage/training-clipboard.png
+          src: /security/media/hubpage/ignite-glyphs/reference-2-yellow.png
       - componentType: icon-card
         title: Plan, implement, and administer Conditional Access
         summary: Conditional Access gives a fine granularity of control over which users can do specific activities, access which resources, and how to ensure data and systems are safe.
         url: /training/modules/plan-implement-administer-conditional-access//?wt.mc_id=securityhub_conditionalaccess_webpage_sci
         icon:
           componentType: image
-          src: /security/media/hubpage/training-whiteboard.png
+          src: /security/media/hubpage/ignite-glyphs/concept-1-yellow.png
 
 # Microsoft Security product documentation 
   - componentType: grid

security-docs/security-for-ai/TOC.yml

@@ -4,6 +4,8 @@
   items:
     - name: What's new for AI security?
       href: whats-new.md
+    - name: Responsible AI
+      href: transparency-application-cards-security.md
     - name: Build a strong security posture for AI
       href: posture.md
     - name: Prepare for AI security