diff --git a/windows/security/threat-protection/device-control/device-control-report.md b/windows/security/threat-protection/device-control/device-control-report.md index 8a0bd23e50..5cf0ce8621 100644 --- a/windows/security/threat-protection/device-control/device-control-report.md +++ b/windows/security/threat-protection/device-control/device-control-report.md @@ -39,13 +39,15 @@ Device control in Microsoft Defender for Endpoint empowers security administrato The Device protection card on the **Reports** dashboard shows the number of audit events generated by media type, over the last 180 days. -![DeviceControlReportCard](images/devicecontrolcard.png) +> [!div class="mx-imgBorder"] +> ![DeviceControlReportCard](images/devicecontrolcard.png) The **View details** button shows more media usage data in the **device control report** page. The page provides a dashboard with aggregated number of events per type and a list of events. Administrators can filter on time range, media class name, and device ID. -![DeviceControlReportDetails](images/Detaileddevicecontrolreport.png) +> [!div class="mx-imgBorder"] +> ![DeviceControlReportDetails](images/Detaileddevicecontrolreport.png) When you select an event, a flyout appears that shows you more information: @@ -53,15 +55,18 @@ When you select an event, a flyout appears that shows you more information: - **Media information:** Media information includes Media name, Class name, Class GUID, Device ID, Vendor ID, Volume, Serial number, and Bus type. - **Location details:** Device name and MDATP device ID. -![FilterOnDeviceControlReport](images/devicecontrolreportfilter.png) +> [!div class="mx-imgBorder"] +> ![FilterOnDeviceControlReport](images/devicecontrolreportfilter.png) To see real-time activity for this media across the organization, select the **Open Advanced hunting** button. This includes an embedded, pre-defined query. -![QueryOnDeviceControlReport](images/Devicecontrolreportquery.png) +> [!div class="mx-imgBorder"] +> ![QueryOnDeviceControlReport](images/Devicecontrolreportquery.png) To see the security of the device, select the **Open device page** button on the flyout. This button opens the device entity page. -![DeviceEntityPage](images/Devicesecuritypage.png) +> [!div class="mx-imgBorder"] +> ![DeviceEntityPage](images/Devicesecuritypage.png) ## Reporting delays