From 5471abe62d6675c5ba961676eca11efed3b1feed Mon Sep 17 00:00:00 2001 From: Louie Mayor Date: Tue, 13 Oct 2020 17:39:26 -0700 Subject: [PATCH] Update threat-analytics-understand-the-reports.md --- .../threat-analytics-understand-the-reports.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/threat-analytics-understand-the-reports.md b/windows/security/threat-protection/microsoft-defender-atp/threat-analytics-understand-the-reports.md index 9c0ef98b92..e0bd3c265e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/threat-analytics-understand-the-reports.md +++ b/windows/security/threat-protection/microsoft-defender-atp/threat-analytics-understand-the-reports.md @@ -66,7 +66,13 @@ These detections are available on devices with Microsoft Defender Antivirus. On | Detection type | Description | |--|--| -| Antivirus | These detections are available on devices +| Antivirus | These detections are raised on devices running [Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) to identify malware components using various anti-malware technologies. | +| Endpoint detection and response | These detections constitute alerts on Microsoft Defender Security Center and are raised on [devices onboarded to Microsoft Defender for Endpoint](onboard-configure.md). These detections generally rely of security signals collected by the Microsoft Defender for Endpoint sensor, but also incorporates antivirus, network protection, and all other signals available on each device. | +| Attack surface reduction rules| | + + + +