health state, sha1

This commit is contained in:
Joey Caparas
2017-02-14 15:00:50 -08:00
parent b6ba13316a
commit 6c3249a99a
3 changed files with 9 additions and 9 deletions

View File

@ -1,5 +1,5 @@
--- ---
title: Check sensor health status in Windows Defender ATP title: Check sensor health state in Windows Defender ATP
description: Check sensor health on machines to see if they are misconfigured or inactive. description: Check sensor health on machines to see if they are misconfigured or inactive.
keywords: sensor, sensor health, misconfigured, inactive, no sensor data, sensor data, impaired communication, communication keywords: sensor, sensor health, misconfigured, inactive, no sensor data, sensor data, impaired communication, communication
search.product: eADQiWindows 10XVcnh search.product: eADQiWindows 10XVcnh
@ -11,7 +11,7 @@ author: mjcaparas
localizationpriority: high localizationpriority: high
--- ---
# Check sensor health status # Check sensor health state
**Applies to:** **Applies to:**

View File

@ -133,7 +133,7 @@ Content-Type: application/json;
{ {
"Type": "Sha1", "Type": "SHA1",
"Value": "8311e8b377736fb93b18b15372355f3f26c4cd29", "Value": "8311e8b377736fb93b18b15372355f3f26c4cd29",
"DetectionFunction": "Equals", "DetectionFunction": "Equals",
"Enabled": true, "Enabled": true,
@ -161,14 +161,14 @@ JSON Body:
```json ```json
{ {
"iocs": [{ "iocs": [{
"Type": "Sha1", "Type": "SHA1",
"Value": "b68e0b50420dbb03cb8e56a927105bf4b06f3793", "Value": "b68e0b50420dbb03cb8e56a927105bf4b06f3793",
"DetectionFunction": "Equals", "DetectionFunction": "Equals",
"Enabled": true, "Enabled": true,
"AlertDefinition@odata.bind": "AlertDefinitions(1)" "AlertDefinition@odata.bind": "AlertDefinitions(1)"
}, },
{ {
"Type": "Sha1", "Type": "SHA1",
"Value": "b68e0b50420dbb03cb8e56a927105bf4b06f3793", "Value": "b68e0b50420dbb03cb8e56a927105bf4b06f3793",
"DetectionFunction": "Equals", "DetectionFunction": "Equals",
"Enabled": true, "Enabled": true,
@ -200,7 +200,7 @@ odata.metadata = none
{ {
"value": [{ "value": [{
"Type": "Sha1", "Type": "SHA1",
"Value": "abcdeabcde1212121212abcdeabcde1212121212", "Value": "abcdeabcde1212121212abcdeabcde1212121212",
"DetectionFunction": "Equals", "DetectionFunction": "Equals",
"ExpiresAt": null, "ExpiresAt": null,

View File

@ -35,7 +35,7 @@ You can explore and investigate alerts and machines to quickly determine if, whe
From the **Dashboard** you will see aggregated events to facilitate the identification of significant events or behaviors on a machine. You can also drill down into granular events and low-level indicators. From the **Dashboard** you will see aggregated events to facilitate the identification of significant events or behaviors on a machine. You can also drill down into granular events and low-level indicators.
It also has clickable tiles that give visual cues on the overall health status of your organization. Each tile opens a detailed view of the corresponding overview. It also has clickable tiles that give visual cues on the overall health state of your organization. Each tile opens a detailed view of the corresponding overview.
## ATP alerts ## ATP alerts
You can view the overall number of active ATP alerts from the last 30 days in your network from the **ATP alerts** tile. Alerts are grouped into **New** and **In progress**. You can view the overall number of active ATP alerts from the last 30 days in your network from the **ATP alerts** tile. Alerts are grouped into **New** and **In progress**.
@ -91,13 +91,13 @@ Clicking on any of these categories will navigate to the [Machines view](investi
## Sensor health ## Sensor health
The **Sensor health** tile provides information on the individual endpoints ability to provide sensor data to the Windows Defender ATP service. It reports how many machines require attention and helps you identify problematic machines. The **Sensor health** tile provides information on the individual endpoints ability to provide sensor data to the Windows Defender ATP service. It reports how many machines require attention and helps you identify problematic machines.
![Machine health status tile](images/atp-tile-sensor-health.png) ![Sensor health tile](images/atp-tile-sensor-health.png)
There are two status indicators that provide information on the number of machines that are not reporting properly to the service: There are two status indicators that provide information on the number of machines that are not reporting properly to the service:
- **Inactive** - Machines that have stopped reporting to the Windows Defender ATP service for more than seven days in the past month. - **Inactive** - Machines that have stopped reporting to the Windows Defender ATP service for more than seven days in the past month.
- **Misconfigured** These machines might partially be reporting telemetry to the Windows Defender ATP service and might have configuration errors that need to be corrected. - **Misconfigured** These machines might partially be reporting telemetry to the Windows Defender ATP service and might have configuration errors that need to be corrected.
When you click any of the groups, youll be directed to machines view, filtered according to your choice. For more information, see [Check sensor health status](check-sensor-status-windows-defender-advanced-threat-protection.md) and [Investigate machines](investigate-machines-windows-defender-advanced-threat-protection.md). When you click any of the groups, youll be directed to machines view, filtered according to your choice. For more information, see [Check sensor health state](check-sensor-status-windows-defender-advanced-threat-protection.md) and [Investigate machines](investigate-machines-windows-defender-advanced-threat-protection.md).
## Service health ## Service health
The **Service health** tile informs you if the service is active or if there are issues. The **Service health** tile informs you if the service is active or if there are issues.