deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-19 12:23:37 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

fix meta data

Browse Source
This commit is contained in:
Joey Caparas
2017-09-05 14:16:50 -07:00
parent 40bd274b38
commit 6a15b01bc9
5 changed files with 6 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
windows/threat-protection/windows-defender-atp/get-alert-related-ip-info-windows-defender-advanced-threat-protection.md
View File

@ -13,7 +13,7 @@ ms.localizationpriority: high
ms.date: 09/05/2017 ms.date: 09/05/2017
--- ---
# Get alert related domain information # Get alert related IP information
Retrieves all IPs related to a specific alert. Retrieves all IPs related to a specific alert.
## Permissions ## Permissions

2
windows/threat-protection/windows-defender-atp/get-machine-by-id-windows-defender-advanced-threat-protection.md
View File

@ -13,7 +13,7 @@ ms.localizationpriority: high
ms.date: 09/05/2017 ms.date: 09/05/2017
--- ---
# Get machines # Get machine by ID
Retrieves a machine entity by ID. Retrieves a machine entity by ID.
## Permissions ## Permissions

6
windows/threat-protection/windows-defender-atp/get-user-related-machines-windows-defender-advanced-threat-protection.md
View File

@ -1,6 +1,6 @@
--- ---
title: Get user related machines API title: Get user related machines API
description: Retrieves a collection of alerts related to a given user ID. description: Retrieves a collection of machines related to a given user ID.
keywords: apis, graph api, supported apis, get, user, user related alerts keywords: apis, graph api, supported apis, get, user, user related alerts
search.product: eADQiWindows 10XVcnh search.product: eADQiWindows 10XVcnh
ms.prod: w10 ms.prod: w10
@ -13,8 +13,8 @@ ms.localizationpriority: high
ms.date: 09/05/2017 ms.date: 09/05/2017
--- ---
# Get user related alerts # Get user related machines
Retrieves a collection of alerts related to a given user ID. Retrieves a collection of machines related to a given user ID.
## Permissions ## Permissions
User needs read permissions. User needs read permissions.

10
windows/threat-protection/windows-defender-atp/investigate-user-windows-defender-advanced-threat-protection.md
View File

@ -24,16 +24,6 @@ ms.date: 09/05/2017
[!include[Prerelease information](prerelease.md)] [!include[Prerelease information](prerelease.md)]
# Investigate a user account in Windows Defender ATP
**Applies to:**
- Windows 10 Enterprise
- Windows 10 Education
- Windows 10 Pro
- Windows 10 Pro Education
- Windows Defender Advanced Threat Protection (Windows Defender ATP)
## Investigate user account entities ## Investigate user account entities
Identify user accounts with the most active alerts (displayed on dashboard as "Users at risk") and investigate cases of potential compromised credentials, or pivot on the associated user account when investigating an alert or machine to identify possible lateral movement between machines with that user account. Identify user accounts with the most active alerts (displayed on dashboard as "Users at risk") and investigate cases of potential compromised credentials, or pivot on the associated user account when investigating an alert or machine to identify possible lateral movement between machines with that user account.

2
windows/threat-protection/windows-defender-atp/supported-apis-windows-defender-advanced-threat-protection.md
View File

@ -1,6 +1,6 @@
--- ---
title: Supported Windows Defender Advanced Threat Protection APIs title: Supported Windows Defender Advanced Threat Protection APIs
description: Use the exposed data and actions using a set of progammatic APIs that are part of the Microsoft Intelligence Security Graph. description: Learn about the specific supported Windows Defender Advanced Threat Protection entities where you can create API calls to.
keywords: apis, graph api, supported apis, actor, alerts, machine, user, domain, ip, file keywords: apis, graph api, supported apis, actor, alerts, machine, user, domain, ip, file
search.product: eADQiWindows 10XVcnh search.product: eADQiWindows 10XVcnh
ms.prod: w10 ms.prod: w10