deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-28 13:17:23 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

fix table, spelling check

Browse Source
This commit is contained in:
Joey Caparas 2016-04-19 13:52:59 +10:00
parent 50f1b5a9cc
commit 3be83d3197
2 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
windows/keep-secure/alerts-queue-windows-advanced-threat-protection.md
View File

@ -27,7 +27,7 @@ The following table and screenshot demonstrate the main areas of the **Alerts qu
Highlighted area|Area name|Description
:---|:---|:---
(1)|**Alerts queue**| Select to show **New**, **In Progress**, or **Resolved alerts**
(2)|Alerts|Each alert shows:<ul><li>The severity of an alert as a coloured bar</li><li>A short description of the alert, including the name of the threat actor (in cases where the attribution is possible)</li><li>The last occurrence of the alert on any machine</li><li>The number of days the alert has been in the queue</li><li>The general category or type of alert, or the alert's kill-chain stage</li><li>The affected machine (if there are multiple machines, the number of affected machines will be shown)</li><li>A **Manage Alert** menu icon ![The menu icon looks like three periods stacked on top of each other](images/menu-icon.png) that allows you to update the alert's status and add comments</li></ul>Clicking an alert expands to display more information about the threat and brings you to the date in the timeline when the alert was detected.
(2)|Alerts|Each alert shows:<ul><li>The severity of an alert as a colored bar</li><li>A short description of the alert, including the name of the threat actor (in cases where the attribution is possible)</li><li>The last occurrence of the alert on any machine</li><li>The number of days the alert has been in the queue</li><li>The general category or type of alert, or the alert's kill-chain stage</li><li>The affected machine (if there are multiple machines, the number of affected machines will be shown)</li><li>A **Manage Alert** menu icon ![The menu icon looks like three periods stacked on top of each other](images/menu-icon.png) that allows you to update the alert's status and add comments</li></ul>Clicking an alert expands to display more information about the threat and brings you to the date in the timeline when the alert was detected.
(3)|Alerts sorting and filters | You can sort alerts by: <ul><li>**Newest** (when the threat was last seen on your network)</li><li>**Time in queue** (how long the threat has been in your queue)</li><li>**Severity**</li></ul>You can also filter the displayed alerts by:<ul><li>Severity</li><li>Time period</li></ul>See [Windows Defender ATP alerts](use-windows-defender-advanced-threat-protection.md#windows-defender-atp-alerts) for more details.
##Sort and filter the Alerts queue

14
windows/keep-secure/portal-overview-windows-defender-advanced-threat-protection.md
View File

@ -37,13 +37,13 @@ You can navigate through the portal using the menu options available in all sect
Area | Description
:---|:---
(1) Launcher | Use the launcher to quickly go to your Windows Security Center portal and select from available services.
(2) Windows Security Center home | Opens the Windows Security Center home.
(3) Settings | Provides access to configuration settings such as time zone, alert suppression rules, and license information.
(4) Navigation pane | Use the navigation pane to move between the **Dashboard**, **Alerts queue**, **Machines view**, **Preferences setup**, and **Client onboarding**.
|**Dashboard** | Provides clickable tiles that open detailed information on various alerts that have been detected in your organization.
|**Alerts queue** | Enables you to view separate queues of new, in progress, and resolved alerts.
|**Machines view**| Displays the list of machines that are onboarded to Windows Defender ATP, some information about them, and the corresponding number of alerts.
(1) Launcher | Use the launcher to quickly go to your Windows Security Center portal and select from available services.||
(2) Windows Security Center home | Opens the Windows Security Center home.||
(3) Settings | Provides access to configuration settings such as time zone, alert suppression rules, and license information.||
(4) Navigation pane | Use the navigation pane to move between the **Dashboard**, **Alerts queue**, **Machines view**, **Preferences setup**, and **Client onboarding**.||
|**Dashboard** | Provides clickable tiles that open detailed information on various alerts that have been detected in your organization. |
|**Alerts queue** | Enables you to view separate queues of new, in progress, and resolved alerts.|
|**Machines view**| Displays the list of machines that are onboarded to Windows Defender ATP, some information about them, and the corresponding number of alerts.|
|**Preferences setup**| Shows the settings you selected during [service onboarding](service-onboarding-windows-advanced-threat-protection.md), and lets you update your industry preferences and retention policy period.
|**Client onboarding**| Allows you to download the onboarding configuration package.
(5) Main portal| Main area where you will see the different views such as the Dashboard, Alerts queue, and Machines view.|