From 066d707c5dde8c218fd4becd6a996ffc3acfdd81 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 9 Feb 2017 17:33:28 -0800 Subject: [PATCH] add troubleshoot content for custom ti --- ...ows-defender-advanced-threat-protection.md | 1 + ...ows-defender-advanced-threat-protection.md | 5 ++-- ...ows-defender-advanced-threat-protection.md | 1 + ...ows-defender-advanced-threat-protection.md | 23 +++++++++++++++---- 4 files changed, 24 insertions(+), 6 deletions(-) diff --git a/enable-custom-ti-windows-defender-advanced-threat-protection.md b/enable-custom-ti-windows-defender-advanced-threat-protection.md index 3060c0b3a4..a881fa5b5a 100644 --- a/enable-custom-ti-windows-defender-advanced-threat-protection.md +++ b/enable-custom-ti-windows-defender-advanced-threat-protection.md @@ -42,3 +42,4 @@ You'll need to use these values on the JSON file when doing REST API calls. ## Related topics - [Understand threat intelligence](threat-indicator-concepts-windows-defender-advanced-threat-protection.md) - [Create custom threat intelligence](custom-ti-api-windows-defender-advanced-threat-protection.md) +- [Troubleshoot custom custom threat intelligence issues](troubleshoot-custom-ti-api-windows-defender-advanced-threat-protection.md) diff --git a/windows/keep-secure/custom-ti-api-windows-defender-advanced-threat-protection.md b/windows/keep-secure/custom-ti-api-windows-defender-advanced-threat-protection.md index 995d893996..c2bb6ec530 100644 --- a/windows/keep-secure/custom-ti-api-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/custom-ti-api-windows-defender-advanced-threat-protection.md @@ -345,5 +345,6 @@ $count | boolean | A collection and the number of items in the collection. These parameters are compatible with the [OData V4 query language](http://docs.oasis-open.org/odata/odata/v4.0/errata03/os/complete/part2-url-conventions/odata-v4.0-errata03-os-part2-url-conventions-complete.html#_Toc453752356). ## Related topics -[Understand threat intelligence](threat-indicator-concepts-windows-defender-advanced-threat-protection.md) -[Enable the custom threat intelligence application](enable-custom-ti-windows-defender-advanced-threat-protection.md) +- [Understand threat intelligence](threat-indicator-concepts-windows-defender-advanced-threat-protection.md) +- [Enable the custom threat intelligence application](enable-custom-ti-windows-defender-advanced-threat-protection.md) +- [Troubleshoot custom custom threat intelligence issues](troubleshoot-custom-ti-api-windows-defender-advanced-threat-protection.md) diff --git a/windows/keep-secure/threat-indicator-concepts-windows-defender-advanced-threat-protection.md b/windows/keep-secure/threat-indicator-concepts-windows-defender-advanced-threat-protection.md index 117157249d..272dfb0836 100644 --- a/windows/keep-secure/threat-indicator-concepts-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/threat-indicator-concepts-windows-defender-advanced-threat-protection.md @@ -50,3 +50,4 @@ IOCs have a many-to-one relationship with alert definitions such that an alert d ## Related topic - [Enable the custom threat intelligence application](enable-custom-ti-windows-defender-advanced-threat-protection.md) - [Create custom threat indicators using REST API](custom-ti-api-windows-defender-advanced-threat-protection.md) +- [Troubleshoot custom custom threat intelligence issues](troubleshoot-custom-ti-api-windows-defender-advanced-threat-protection.md) diff --git a/windows/keep-secure/troubleshoot-custom-ti-windows-defender-advanced-threat-protection.md b/windows/keep-secure/troubleshoot-custom-ti-windows-defender-advanced-threat-protection.md index 7ceae409be..6fe6c6cdc8 100644 --- a/windows/keep-secure/troubleshoot-custom-ti-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/troubleshoot-custom-ti-windows-defender-advanced-threat-protection.md @@ -24,8 +24,23 @@ localizationpriority: high [Some information relates to pre-released product, which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.] You might need to troubleshoot issues while using the custom threat intelligence feature. -This page provides detailed steps to troubleshoot issues you might encounter and common errors that might occur. -State | Potential cause of error | Error message -:---|:---|:--- -Initialize | - Service call timed out
- +This page provides detailed steps to troubleshoot issues you might encounter while using the feature. + + +## Get a new secret +If your client secret expires or if you've misplaced the copy provided when you were enabling the custom threat intelligence application, you'll need to get a new secret. + +1. Login to the [Azure management portal](https://ms.portal.azure.com). + +2. Select **Active Directory**. + +3. Select your tenant. + +4. Click **Application**, then select your custom threat intelligence application. + +5. Select **Keys** section, then provide a key description and specify the key validity duration. + +6. Click **Save**. The key value is displayed. + +7. Copy the value and save it in a safe place.