Merge branch 'master' into dansimp-author-cleanup

.openpublishing.redirection.json

@@ -16525,6 +16525,11 @@
       "redirect_url": "/microsoft-365/security/defender-endpoint/defender-endpoint-false-positives-negatives",
       "redirect_document_id": false
     },
+    {
+      "source_path": "windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md",
+      "redirect_url": "/microsoft-365/security/defender-endpoint/defender-endpoint-false-positives-negatives",
+      "redirect_document_id": false
+    },
     {
       "source_path": "windows/deployment/update/waas-mobile-updates.md",
       "redirect_url": "/windows/deployment/update/waas-configure-wufb",

windows/client-management/mdm/diagnose-mdm-failures-in-windows-10.md

@@ -14,7 +14,7 @@ ms.date: 06/25/2018
 
 # Diagnose MDM failures in Windows 10
 
-To help diagnose enrollment or device management issues in Windows 10 devices managed by an MDM server, you can examine the MDM logs collected from the desktop or mobile device. The following sections describe the procedures for collecting MDM logs.
+To help diagnose enrollment or device management issues in Windows 10 devices managed by an MDM server, you can examine the MDM logs collected from the desktop. The following sections describe the procedures for collecting MDM logs.
 
 ## Download the MDM Diagnostic Information log from Windows 10 PCs
 
@@ -30,6 +30,27 @@ To help diagnose enrollment or device management issues in Windows 10 devices m
 
 1. In File Explorer, navigate to c:\Users\Public\Documents\MDMDiagnostics to see the report.
 
+## Use command to collect logs directly from Windows 10 PCs
+
+You can also collect the MDM Diagnostic Information logs using the following command:
+
+```xml
+mdmdiagnosticstool.exe -area DeviceEnrollment;DeviceProvisioning;Autopilot -cab c:\users\public\documents\MDMDiagReport.cab
+```
+-   In File Explorer, navigate to c:\Users\Public\Documents\MDMDiagnostics to see the report.
+
+### Understanding cab structure
+The cab file will have logs according to the areas that were used in the command. This explanation is based on DeviceEnrollment,DeviceProvisioning and Autopilot areas. It applies to the cab files collected via command line or Feedback Hub
+
+-   DiagnosticLogCSP_Collector_Autopilot_*: Autopilot etls
+-   DiagnosticLogCSP_Collector_DeviceProvisioning_*: Provisioning etls (Microsoft-Windows-Provisioning-Diagnostics-Provider)
+-   MDMDiagHtmlReport.html: Summary snapshot of MDM space configurations and policies. Includes, management url, MDM server device id, certificates, policies.
+-   MdmDiagLogMetadata,json: mdmdiagnosticstool metadata file, contains command line arguments used to run the tool
+-   MDMDiagReport.xml: contains a more detail view into the MDM space configurations, e.g enrollment variables
+-   MdmDiagReport_RegistryDump.reg: contains dumps from common MDM registry locations
+-   MdmLogCollectorFootPrint.txt: mdmdiagnosticslog tool logs from running the command
+-   *.evtx: Common event viewer logs microsoft-windows-devicemanagement-enterprise-diagnostics-provider-admin.evtx main one that contains MDM events.
+
 ## Collect logs directly from Windows 10 PCs
 
 Starting with the Windows 10, version 1511, MDM logs are captured in the Event Viewer in the following location:

windows/security/includes/microsoft-defender.md

@@ -11,4 +11,4 @@ ms.topic: include
 ---
 
 > [!IMPORTANT]
-> The improved [Microsoft 365 security center](https://security.microsoft.com) is now available in public preview. This new experience brings Defender for Endpoint, Defender for Office 365, Microsoft 365 Defender, and more into the Microsoft 365 security center. [Learn what's new](/microsoft-365/security/mtp/overview-security-center). This topic might apply to both Microsoft Defender for Endpoint and Microsoft 365 Defender. Refer to the **Applies To** section and look for specific call outs in this article where there might be differences.
+> The improved [Microsoft 365 security center](https://security.microsoft.com) is now available. This new experience brings Defender for Endpoint, Defender for Office 365, Microsoft 365 Defender, and more into the Microsoft 365 security center. [Learn what's new](/microsoft-365/security/mtp/overview-security-center).

windows/security/threat-protection/device-guard/enable-virtualization-based-protection-of-code-integrity.md

@@ -4,8 +4,8 @@ description: This article explains the steps to opt in to using HVCI on Windows
 ms.prod: m365-security
 ms.mktglfcycl: deploy
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/coinminer-malware.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/coordinated-malware-eradication.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/criteria.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/cybersecurity-industry-partners.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/developer-faq.md

@@ -8,8 +8,8 @@ ms.prod: m365-security
 ms.mktglfcycl: deploy
 ms.sitesec: library
 ms.pagetype: security
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro

windows/security/threat-protection/intelligence/developer-resources.md

@@ -9,8 +9,8 @@ ms.mktglfcycl: deploy
 ms.sitesec: library
 ms.localizationpriority: medium
 ms.pagetype: security
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/exploits-malware.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/fileless-threats.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/index.md

@@ -6,8 +6,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/macro-malware.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/malware-naming.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/phishing-trends.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/phishing.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/prevent-malware-infection.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/ransomware-malware.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/rootkits-malware.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/safety-scanner-download.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/submission-guide.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/supply-chain-malware.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/support-scams.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/trojans-malware.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/understanding-malware.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/unwanted-software.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/virus-information-alliance-criteria.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/virus-initiative-criteria.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance

windows/security/threat-protection/intelligence/worms-malware.md

@@ -7,8 +7,8 @@ ms.prod: m365-security
 ms.mktglfcycl: secure
 ms.sitesec: library
 ms.localizationpriority: medium
-ms.author: ellevin
+ms.author: dansimp
-author: levinec
+author: dansimp
 manager: dansimp
 audience: ITPro
 ms.collection: M365-security-compliance