From 29bd1cf52eaa2e3b088d18b7877e1add4b35d183 Mon Sep 17 00:00:00 2001
From: jcaparas <macapara@microsoft.com>
Date: Mon, 26 Feb 2018 16:23:40 -0800
Subject: [PATCH] update threat analytics topic

---
 ...-windows-defender-advanced-threat-protection.md | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/windows/security/threat-protection/windows-defender-atp/threat-analytics-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/threat-analytics-windows-defender-advanced-threat-protection.md
index ff0a3ed700..f0b0566572 100644
--- a/windows/security/threat-protection/windows-defender-atp/threat-analytics-windows-defender-advanced-threat-protection.md
+++ b/windows/security/threat-protection/windows-defender-atp/threat-analytics-windows-defender-advanced-threat-protection.md
@@ -13,13 +13,21 @@ ms.localizationpriority: high
 ms.date: 03/05/2018
 ---
 
-# Windows Defender ATP Threat analytics
+# Windows Defender ATP Threat analytics for Meltdown and Spectre
 
 **Applies to:**
 
 - Windows Defender Advanced Threat Protection (Windows Defender ATP)
 
-In a volatile security landscape, it's imperative to have the most up-to-date information about threats. More importantly, it's critical to know if your organization is at risk, identify the endpoints that are, and know the steps to take to mitigate it.
+The Threat analytics report provides an overview of the Meltdown and Spectre threat and visibility on both Software and Firmware mitigations status.
+
+The OS mitigation tile provides visibility into OS mitigation status – whether it’s installed and active. You can see and download a CSV format of the list of machines with no OS mitigation active by clicking the inactive machines on the chart.
+
+Microcode mitigations tile provides visibility into Microcode mitigation/update deployment status.
+Overall mitigation status provides an aggregated view into OS and Microcode mitigation.
+
+
+<!--- In a volatile security landscape, it's imperative to have the most up-to-date information about threats. More importantly, it's critical to know if your organization is at risk, identify the endpoints that are, and know the steps to take to mitigate it.
 
 Windows Defender ATP Threat analytics is designed to deliver timely information about current security threats. It provides a tailored organizational risk evaluation and specific actionable steps you can take to minimize risks. 
 
@@ -27,6 +35,8 @@ The dashboard shows tiles and the current status of the endpoints in your organi
 
 You'll gain insight on the overall mitigation status in your organization and see missing mitigations over time. 
 
+-->
+
 ## Access Threat analytics
 1. From the navigation pane, select **Dashboards** > **Threat analytics**.