deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-22 02:07:24 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

text updates

Browse Source
This commit is contained in:
Beth Levin 2020-04-02 09:35:34 -07:00
parent 038311c9e4
commit 0e6eb6fd95
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-insights.md
View File

@ -22,7 +22,7 @@ ms.topic: conceptual
- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559)
Event insights is a "risk news feed" which will help you interpret how risk is introduced into the organization and which mitigations happened to reduce it.
Event insights is a "risk news feed" which will help you interpret how risk, through new vulnerabilities or exploits, is introduced into the organization.
With events insight, you can check which impactful events occurred in your organization. For example, new vulnerabilities that were introduced, vulnerabilities that became exploitable, the number of impacted machines, and more.
@ -30,16 +30,18 @@ The goal of event insights is to tell the story of your [exposure score](tvm-exp
- Quickly understand and identify high-level takeaways about the state of security in your organization.
- Detect and respond to areas that require investigation or action to improve the current state.
- Determine the cause of large changes to your exposure score
- Communicate with peers and management about the impact of security efforts.
You can reduce you exposure score by addressing what needs to be remediated based on the prioritized security recommendations. See [Security recommendations](tvm-security-recommendation.md) for details.
## Navigation
You can access Event insights mainly through two ways:
You can access Event insights mainly through three ways:
- In the Threat & Vulnerability Management navigation menu in the Microsoft Defender Security Center.
- Hovering over the Exposure Score graph in the [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md)
- Top events card in the [Threat & Vulnerability Management dashboard](tvm-dashboard-insights.md). The highest impact events (for example, affect the most machines or critical vulnerabilities)
In the Threat & Vulnerability Management dashboard, hover over the Exposure score graph to view top events from that day that impacted your machines. If there are no events, then no insights will be shown.