 outlines all the difference. Internal telemetry and customer signals indicate the following services have been recovered. This is according to Microsoft. They include Defender, Defender or Endpoint, Defender Experts, Intune, OneNote, OneDrive for business.