From 9796bfdf7230db15271c3e50b9b854927c0eb3ea Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Mon, 13 Jul 2020 12:36:14 -0700 Subject: [PATCH] device value --- .../images/tvm-device-value-dropdown.png | Bin 0 -> 20191 bytes .../images/tvm-device-value-flyout.png | Bin 0 -> 20689 bytes .../threat-and-vuln-mgt-scenarios.md | 23 ++++++++++++------ 3 files changed, 15 insertions(+), 8 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm-device-value-dropdown.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm-device-value-flyout.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/tvm-device-value-dropdown.png b/windows/security/threat-protection/microsoft-defender-atp/images/tvm-device-value-dropdown.png new file mode 100644 index 0000000000000000000000000000000000000000..2fe843f6ad6601e2c661627cfa596ab06d0102e5 GIT binary patch literal 20191 zcmbTeWmr{T^ezgbAW|xl5=u&UmkQD$-Q6wSpn`OFcXxNEu<353yV-P{iT?i2`Ec(& z&w1_#bZypJbImo!m}9)}JI2QEtE3Rh3)~klFfb@0!U8fdFi#S}arJX}@UQKv`aJj# z@td%+4Gauw=i?7-6cy@Q@Jj?+5s5DdYX~UlczFBjyX`PA?_fj(KFK*I?kzZ}$wBWg zkFjouwmy&%#RaR>xzfGJ%nHq_mCp9kD2euWsZq-{t5alR7_%QJx@pLxFk!PK{ozy+ zt)o1gzVdn9T9yn;PUcPLH>J&s9(o_9x5&R?CU34BkA^uQo2MMRjhhvTt2*@9$j{$< zz5M)qnWPv+9p>-h@eLVl4*1o3uWyuy?7#jV$%?d6JYM!bQS^!AzZ>KZg6UL57yT*< z?^bYC%ORg>cfh;B?j;E#5-@ zGU#^gPM5MtGP$|%q#_3mSE|OFD&%GRwi=!@wahkYIBTMAQ~{wSswKaX&7nVz{+5lk zqsI;Dz5HS%%j#T4(WmEBiFt4CSa_~+3zzrzeQNOdtTOtbYZ#d6kn5m~hlcJOzL*id zdXzDKl|TFb3@{7M!C1i^o)^qn4s&E)Rp*~pH^+uav7kgg@+Io;dMC21Whjge%-Rw> znVD;9;v3j->pme`jpg(Hp>FAKxwrC;xl=tFxU4oZqm>iX*botP-5-qa;Yy8C2@w2) z7ogGH4jm*oxBNp{FFS?ke=s;-EJ+u8+0+o*<%{y=?21qGGuQQ44*!=_<2?413}q+R zQ{DF>KJ$*t>s(vvhrckOhj;;twW2X??omtRQ!ku$Pj%{VQ^-HDPEl;O4i$5sUT{4x zseg*1*l$LN%P#PtuLxxVqL`F%F%b^&*YXJLG#GDg-C`Na;fnB;&gKSu zX7RDoe}l6q;#dH6zS7`LfQGRk1BI_g7xh!(dvcL z0TMy$BZlcND7#arohRQk1|W%h7&Cq!EKwr$5U&?ovOFB6Voigb{IB;&ER*l%Vx)IjZ- zAMh_&lRh}?iU-(OlJ#<+s8eS2>!%r9FbfUNeb=V?ZPckbEV+8v5g6t`@3My9PvFEA zGA}P*s%#Uz>37;~7gVz0wb-oPO2rM}%%K zpX_pItbBPwc>EVa0gM8s$Lmd?F(dHJ|PPl^i7VT|?iTMT1yUBo!O@^K=%3aF`C_1mx^k14}Z zXcjSdMN1+t|6GN>98A3K=2pbFSYFH9{9QE)s zp;c}|xA4@PYXhljYBP!?G<|prZ7Fl#C zb@f$(aujA{4kn*s+KX1^8zcFZnBgiOqWcWlxm+-t*zn1C5Ki;a?R%ue-do-{#uA>U z6!5Z{n|U5oL-(81Ad<+P$|K!@lP{$FR?h7+4rA&?Q(6o2p4LmpvF%bX@aeFuP2X4ES1u zEYIF@gU~VGk;S^9#)NmdhQPl^zKJ|VV~Edd;=ABhm#>Ec@7eZ^Lf>0kp^p?C^&a&G z5_pp$6h+g!GG+*MF=B|cs9!1HJ%~|Q;_%jeEgNpDLDo*Q#6c|>%@vt{jWhml@g#Lw%S2nkwt$F553GH?vw!h35NQ z5XR}>tLCSx`l1g7bnTRC892Z`i2Z{ zTKDj3^)B_ijTi(l#1Q9>;1+z0gEYPjEIF1rRzTCFYW9X1G5dFjtg+(^3( zD5>*R9~f6P5$25*tR$A-xamABY9GeV@v#-1GVr0Hy^Wr3c$iU#KiGoXU^`xVLB3nDHClFv(nC!iqrr%G zbDp~#UKCmsmRs&!VHZk{P(e2rtJ{(-8>23&6iU3BF7ae*7}1@>{221*D-lxMP(c1* z)BB9gj=_>5_q?abF7@RlDj~3eRWb5k;#Vcy45>{w_GpBjOEs|-uRPR|lq~$7?u}|m zkggg-zv>eZ9d6fzh$})>v}%1G+V!O z5Q?pMwQDs5lO_1xVb_GUOM-=uU|U%aJ&=_MWx+}4b%@@gk?LK*-d=;r7}7hk#aqX? z_2|%4N=v*`BG&NyTYrKc&a4ty7>0Hst z)o3?Oo8S4nn46bh&*q7KMIe&Dz)h%I%&xKmn2%pxlQ?%U<$FU${y@V)UApmxj&5sy zmT+aYPaRyGnK1p5y>ll+h+K2=id>b4RKfn;@A`h$Aqtlza`|~KGs4q+rKN@^-lX(W z9Gm=(qIM4r4qBP3#`y=@PrKPfy-S_$9QwuQv?$ZQ+5s!SY8gtC94+=<$mXKvC3K3tAROa%wd8Jy0og6 zcNjbPBer#3um!)Qvnnlw@yW0}SSW%aSc9(R_kr%gS#ZAc`_C&5BbFO5?dXAb6_Ky> zk~m{E8-L&%r8Gmjg9h1mEF(^w@azLZo4*j7CV~HF?7i8`v7+qFh{}q<-LCIB>y0{t zG4;b;VQZ_Dg6tarRW!w~jpPTgF$5n8K-BuLx zT(~gu^50b$eF|kk!6yf=exIE&HQJ?aqpu`;;!C%;mZgv!u4M~F-|R-NN=pfg}IXDzm7r?yZ-kmad&qO}}h< z^C|yurF>Dzfn^OYxU*@$4AAVEW{<6~oelk2GbCPgL%Ep;HQnm;!wzIai6XdFjfG;o&-|9Q_X zMebN#+pWLgMzXANNiRbTfd<2PD?8ju>zSOZdv98}>QYC!opEK$VfP`sD5rdK#d(OB z-e;ma`|ejQ6Sm?7%^Ng_Ni+4#lpa^pS7qd8`5UkHEsPLqmfMI8l_QN0Ih-V(2N@5Y z6|{^#_@Y^&HisF0%a5OOLDn+6exf1cFu2eN1HWkME<4b>f(0#^OF#y}TjTeY|spmUSz2X`$M)IJcI$0?JfF7O`tIv-5HH#v%q(Wqe~{bw;pLjrPG)zGh{Qz$)dP8zG8%%ljVRk_9D> zt8R@quU@AJyNq37PX9RHjvC0QQ$?3!!3^#bj494f>b;7mGfDKO>9$!57-+a8wfOF- z`L)exVu1^lMq4L6sLN!$(c%V|Q+j|!X7fdH#mVZ!arDFzMGr#4%u9MRN?r8TLijX2 zTGh|lLFR0%QghpjTB2hIJVo{w8MtLox0OE*zjOz7F)k9SqSgl&>Q$~#2PU)fOfIdj zoDJiHnD;U{dR>QCW;?9}CN`wMX1kEdslj#I?k!CfaM8AP77Ay&wSV{j#Cu-iwAy4- zHS=+_s*eTxv)sHOnF2$oTx`L8uVFEb<64<@IIG?(yHrFvA%romuTT>RRgAD`ueP}p zQ?pZ{8%;Aeb$t1Y3n5ReMKLnz^aS~?R221)|u{FeFds9pOFQhtyWTDH<=kiD? zZ~C(RH-6<*50UfEP8T9g8{0oGQ?kI@U3}Y${UBMxVzNazY zkU)dmGsq%@NNu72WsI;Ox4{AdAW~(8KF;c63_D--C95y+G2F`F=|7nLkhgJbEq%H% zfcMcc_V{#~9m1Q4FN}huPo#C*mA|;Tx+U~vS=$(My?Pq%d=N33{==sN<}5yFa`e#_ zsV)0a<=rZe*|U@k&K%;6)2mW{x-oj$vE(Zbl#bU(ZuYWnRZu<@m^ z*vh$ESI+8QFi_V_z;0Krki(f*0PP)jo6@d!FLo_;>YdBvshO<$TNo?9!hktpN+o7e zT+^wdoxXwi&s0OZFsf5uZ=2*bi0uk6DpJf$E}RB&HL(N*zITtcuD#daIL(*f^2$No z`&=-KNv|I8eZ88?Is_%K%ti_+Z{jZ3z|1XW`k}aWk)dQ|zOvCFuOuP#Qec*9sVyup zNS4J=)oj%{6 z*GW==a)n;Q7-gJ%i|yCJO=9@;yfw$vrY*JI(R++WEA79Q-Z4)n2;EeXRm+a;M7#_V z+a|rgu|h34<89<9$5+3_wX)PD&pR1Fmvo!^O(;Qub)KSif(1{2KN2m(dC6k?LqIpm z#ov(km*MrBQ=>k+31q@W*K>QPs;n`bhO93vKW~ypGnaf98Dr|GBgb!WF9OtX3ve6f z+VCZE&ifAp2Cgstx*<)ZXn_{Ja471i#|VEUcN;iQQyOsV@zO_-jCvB#10N*Zsy~UH z_(axG4_?Xzc+(2&%8g{U6w_X7J-|*ZLpmSzGb^Styk8b($(GzK{wS2>ahF@qa=W+Y z_L_6u8&lUi`f(C;YqYUm1@*>S^MmaQCu3kL1sr zzekd!mbkCMkws`D{}&dy&!=&p*(Lu%uO*v0X` zM#sd+YG_Cr8&kl0ruBW4^W}Rj8=7~&rxQx`IC5^ZzJvidd2n!0Ti$OgJzvZ8tZw|<3u&hRPM7aND7?M}{(D0>YEKEUG~W{ceiWd2oc8L!8}TxW z*Wdil+W}=$?%(}E^Zx4)kzHuxNuQ1_r#e4Ym#BsY zfz@hHL|B+~&bES`#RTbJ1Nf@cju=228@V?IllV0>G^!wji7Wwe6$Y@OVPV>sTBw8s z9qC^Jj?d4F8G|q&F%jY6YP%;pww&I)mmhb;cZ)1)0YxA{3TO!G(PKRvN@8+)0M`L6E&92p?5gIv!+$knku7>Ja%F5izlUqLow7Um9dEE zWG5@PS77D83uZ|FL>?=5xj3krQ*%FA6H!5^&UU*wuS7K)NaoR0XrM_;OLJ``_4EBL zEaTwOcC^f}1$AC@T(#2?>I}E~^9~0A^-1hAZkO{t?U|GH%!B)%cQ+U4e5TPen}LDI zXU;rRNF@>X12qOWl-%6<aLgqG{FJ{i6zgvwsU!K0a%&oE^~WEOWOY&Ur=YK(%7g<1?E~n;M@Dn&q45T#>}{aAp|Jj zYiiheu}ZN0D1A4=xYtt!+gA*V1#aw8&&wBBE6s8R5YbidvvhXKx< zF8=m-YBT0n%(UVs`m2tG)#L)~FPA9}Sn!{q4V!sOhKO{&EhH4x3?(!6#qSwnSG zrP~t>v$nYz5n1_bdis?przZm1dm_fsH1jxm?ey12K3=vtsi`nc8dAc-4#ju&C`}q6 z8YP>*!-&1SY-?0e)zpqIE;dirA*ky}Q8#6(H5T8GYlr+p6gPZ)e5mx1Uc5*bi=my! zHs&PH7LUu{3$a+JU*6p8xjNk}m^Tor<*GIR8}Wo_R4QAChDy43voc9e!4~S<#M&IH zsZ(>;;3XF7jF(6N)0wc|97+Mx`G^==Z@1gMnc~q6#)IOd6BO5}JVoww|RWO_8^OH~ZiX zE?JKG3ns$joTd#pULYYkozHCgrmzGMdffhSP%N=B(h6O7mmAxKQmb9Q=Bl<-Ji*~{ z7OyhCzPTA|bh25m05)@%xHW_C*fF>F`Wrht4+TU;8FQqPs%PZPw%FV8AY<2JIjTXX? zkUh0qXTOgdL#L_m#IQ-DWPD>H8eFB`U{A_)N)H~yTHsbCj~da5^7c0bvf72UIgUtUj2lg(Sscm0O&vKmyI@c=Ih5Sy=@T2JKENnd zq#)*c8xe^2%9MrC{qhJKI4N1Wlx2Iz=Q<6?g=OAEd4_$u7BY8H^Ry=GT%kyzGk~x) znx3Pf^~}vBfZf>VdqN~10~aL7-~RJizlRmUvUXbMP<&Ud)oP@Zl@)rVD+qO;=c>(N zALC3nz0D+b#a$TK$xf#lg(D%bE^5dppOqdl3+>pHo|9AEiK2|mXKn5GMJiP$e?}3t z^>%or$Nn@m3#0t4N_I+!=Zux#Q@u;u@)lKFp!qyDdoqW^z~s$;W-1yISC@2AZ((#F!$Cl7Z^ z^7CqHTW$$-B`6mBJ($TT>dfyG|6#WF-a!o-ZJAM=`^6dzQ$h=*)*q)+ai#0b5FdDS z+_kY*(l_mOnIh`oeZQ4EG`Dn)H>eDkcoNdm{#kjlZ0_o)EBtm+UoE?Get7sxVH8+6 zgMoNI$s8LM0?wphYuWSw*2v5xS^A2L@=A+!GF72uipk+15uUHu?$ck$*X|eZSbs9K zT=RPEP@AQsA7)AnVw!014|TzX{>!D|AXVPpwmhUw?ON9Me;#M~mx|!Soy)%m(=-}w zt5&?nc*|z?4kQpJ!vUFWr+;aqv8gHQ`?%a`oz9iDejNZP6<3~Uv0M(Qk1iQRSTeqs zH}&@V58Re5r!6ObNn^PZq8`+l2OLZn;xy&v`qtTOmb%|@YN(X9QcJMd1?|n(*%ba< z1v&hG!=Qc>v5Uhw!z!L^vbzC7*N=`$x#g~+qU8hTic)M*W%=9^X8TxU=dq(~6N1^9 zBmfB(_E*T?n9(&wM(Sxe=`+}D4r=dZgwX4skl33o4T20{c2JVw_YcUzO*^Genk$|C zPcOjtAfICTy8{?CH9SoKphHrmZpA@JN;n1cwro7+EF;#5nw4s$4xOzuCYH?>CtYp* zbWp!b%W5&5TF6Gln+%Y{%z4T~`h*ESWkgI27Dy`w?OuM3>>j*+Z&_1Ej0*eQ06G#i zr*1V&*{4?}<@N>(bbhcP2H;h^c>{>l&dYZC^~MeR>&A6_5;yu?ee%@m^YLndalLoRbcDHwT#*2*r;Ya^KYXwnr1wa5%l$mkk zu}H0QDS@Y0*0eCgoTV&=L&d$}v{An~- zO#?C*d}>@a4nLvub9#6m5fN42ApEqah5**EyX{meqm&xg6N}$e06Zaj|LM~wwL0r( zAPlO_KV`MN|31X`5J(}LO}Q-xFzl%+ZxZ< zDFd|jryr^T05w;5I|(v3NJ|D4BGmxVU0z+mc7L=5iN|1I z%uZw>^9}%!D$x!QjX~xsPlqMK zzx@;Ygj#mkX}u5Q_Vza4JREv{ZU9WvpKw8hgw@gwtkI8T8aU{;@GMlnZQt}rbvEkW40B;#2~V}dSwBJ+G zcWyEKmjIx-E}>{64woPhsuV>_96khqgf5DH{QFheyxS1Z(`t)>@^#3-#sXOMf;ReS z@r*)=T^M9S0#Ct=_mq_WAc=#px(@ac5fQO@w)P7z^B@_*N1~SvPDL5Gs?OQF#7&=-w>+Y6An{_3GHZWde=L?lf5hb|`r;=R+86UWt{DL;Sz&jk~d z+X<5)zJYoJ@e_|A16)Butpr$5SweEr0qWx7VrO^orFx)@0|PcP+vYCHV`6gFx{jx& zqf@*W6&3wJO`R!Upn#&rIf5Nmk2Y=U{XiU!``8zhPT&TGSQhdf-4MJZ@*>4yCIR=3 zXEg684A(S4O=*8!@nUA|Ff3y|IER?o=cBep7UKu)xFy{ zD=XtIqFdVkQ90VQzTS(cOg#7}gaiZxy#A(gPi65>KoCI5^Bg!iu~vgeQ`iu3w62TCcd|)YQa*Dgw^GHk*89EQ1BWiAgIEKwhwdkS!s18bYgTFo8@ZQ63af z-%_+aZR-bk$S%}*{ehO2R`j$!m*?M@xH3}~`JU+C3lvKze*_|P8@rCTWp6)3_Xw3t zt!`|17Zgwd=|u*jjPRfAp~s<=TUi;ovZ7O=?;j8lrNS_lV&p2`GptbIBqD-HN=gb8 z2H{d=p*70KPA-$*avjE0f2b)aq^}?Rx_jgjlovwap{?%`IV}@`?gFgIl4{{!g%McW z(6G9^{39oaoPdC!wyw@iV%#35?2REd@k_j$$*YGC;hgffTmc;`wI9o~Nps zniF(VK=MIQ_3Ajh$@U%yMs25$&+)T z_V(MOzo5J5rcL)jA1El=78dXc2?<@@+>+vBDE`dDlR# zx<3m~kqDA)YR3F zkB(Y9Iy&;4;;s#WOi1Nswl4ByklaNH0M1(2=ql}Oq4#xlb#Zrf_4UdU1t!k&9@QtY z7=%NB=zmd}odQlI{q<|>nn*-#gQAp{(Qh)JzLd`6z5g_96m$&vw00X>qN^L=7Iz7)14S5F|i07d9GkYF5d_OqCcN1u9l zc$AlygAkGikYI*T$Y_%bT7}Q}qig87HkRM_sD>Xwq3f+b;P&QfLe4CkAF-C2n%ZiL43IGrQT!u#>Bgy1SVDo7G)5br2zMX@N%dCX>PGT^br^9^T zq9U#b;MIO!G{0cMlBt9&Z923jjiL5mbQJ5r6gp>H3@o$Vw~ej~mZ2l?z zvxKrTVx>wW2Ef^~#A3#c-ojd#yHG)*=~}ko1@A^g0Jj5@b4VY`(I^&2Cf-1f8dUt) zZRQtuGn9Ht%;a8FT$X+cAim}0W!rzr8~_mQs=|MQ#QNzFUxuzvFe_Y5Xy}3K`3$PQ zTaqNOA|_BP^g((Q9X1Im;sz+{*|TSlmZE2^N{GLwnR=#M!TV8A5Po;61ny(T$Rnl% zd?dGR@m0`|e?Xqc+U`fo`3tRuA5>;s?ik;j43Xj*PM-`d&AlK*>uHYHR4M%qx)A}- z_S+hJ{ZtVV6=i0NSo-D)#HqB!GqMFSfLq%mJSV-Wmxt9E=SP2|?@d z>3MwYD>rAV?b#P5=Ia2>`UWJl0*C>Udb#cP>)C2^)2d|freFyAjm|;nk|D> zrc)n2d`J}od#Jx`9ddkn+A%aF#o>K$Fp6|6_z%~Oz%Vabm|;7;4Y@F(Xv@A_i1_x8 zynf_!xM$c?DA>leWQ*n=&W05w5xDz@HU7U*!?@>9{)dgEqMi>HTR%ZadWrJ!$zZ~~ zpE=#pnhjGd>#79rKwfNYMZlMe6oc!+P2~&Sw7Vz|alI9>26ja{Qgg?;8&*b#(T~oL zvbjB)=SEhzs+5x^=dC5HdufQ-_n+dEgTeayY0iDO2KEMAHsk}^LXyyc7b8ls1Q{e! z_;1p~17%uzs{-8PYJ5H~J3!)^PoJX&p&0adC)qk1AlkTHgdSZJNYeOcgQ7!a8op+S zZb(s^$4!>CcsJ>>xmuS`J2hj=@QAxwlfK7kA5UK}|Fbi*E$ipf z{5z>*XXLn8P^+-jRacn~r-;*UaDAfeb_a^}wkBx$E#Fq;&_4hCZqQZ%H#;J9N8y9<4cXaxQmeYhDbgCK~cwX!vCzY%jP2Ke(qh)dKOdbU<2 z_QIrM9JZTOSEEM;am-p=nin0UP~2lzyuBkjH1GC7ezN%i`vN%X*-JfIBvMxc#yZg0 z3A#5?rkN=sk4hDl*>ZG}Day*lqXoTB_JW@T6n)sZ6tamdKMPLo%_hcJ=Z@(fC8sj6 zyy-caReTl&xhTmUNjkF>KV12}cx=*j)-3KyilhGiJfKGqNDZ#gXTwdkncFN?XpE-z>7>+AbKLle~^cxlMV z`-l)?R9htFeh$}@vLv!KJh=5om^No-&U`dLKKn(5#j&)584o)g7+pjg?twzz93Opq z_*!Iw7m`1-|6%?HE&CAWD9dsla`sI0{N9tig}aTvk1;CSUpl#G8$Ia|}R z;`frSF}STkD)Yon5}DygD_X;4=@DJy%+eCkz?0%@-qwI!^ylY8WLH;88ZH)aJT*N1 zBZ>wmX$B00IbW z*$t6H3e7r_KN+(|50TC&%wmjI;~9*XlkgHW`}Y_QX|Fj*b5~h2&1K)k#B|dxPduC% zE~I#JBxCn<8lwg zKg>=`y2Bho8+o0I_-Alr#EU&r8#%)pURBEev{Q5S7uKJdaYBzE@?`Bhzhenq%`ZQK z59d%aZpOxTvWQ{NT4QD|$1Hu)3#wkO4j_~RS)lD9+Cks6LGzE-WnS(cX<7Ynhh7hjT{hu@Gmy(Cyn z&dB59aPD!NUqxx2h2_4OPCd} zf{n4v@B>Jye|ye}{AqW8b0hE^=1N2rlivq7XAM?hF<7qobCkbjBM(^p6&g+dvDZe2 z=&OQUUAoVe{Q;M*3%laCJ)K3zBg(_TebdFPkG}9ERob8Bq~gadO|WK;cNm*#D6%`N z-j+#0vvH2T&hJylvw7kZ?E5(%;EdBrn4&X;AJEYl%sRB$GBoKIUF~}{(2y{T0!AdqdpVPWNGTppfC2%p6oKZdQuAUWt80=3I7(C zs5B`(Cbu!s6O#NlSx*~n2!7R&kZ7XUe0ymaN*IRz-dc-x7sdw*NX=3j^ zq%t4&%z!XuP&~P8YKMc`RKlGskd@sTxaKw#rN;u9a&ai>a7tE1XeV zh8dsJsZHpu2*Khnmw*RIyhIEhU0?~H`^OEbo)5JdO!v(nr#^Js<9EbosbKRi5goBm z{vOE2J~}(|qUsS|XhPEsP3X<8DIPsM)|g*e4{7PH955Ab+Sk_MyjsmUe&YWf<^UhN zw|z=;If;+PKy5So&1TjybX#Ly_0lhB-8@H~Dap?t$zY{HOt{$`UfP_y?plnIuQo_m zxWGgKYAi~B!|qNJ^K%1si&y3IrzM;->ZiAi}wc^xp9`qdCh1T`@)P z5c2x{y{=NeC(Jt%3l3c_0)yq;AAvJ#U-~O?xodkKH11CvpV!xPe|t!k$L^^&^}}{2 zkK=no-&hh9FZ3>T$u@b%B`_=F`egX08}q(#9}`TAjhG|ziG?$otGC;1OBpZiQz?m8 zbB27vhb{*OYkfrB&3A0xPd~PL1}L*ZG3|$N`tI&-7+1FCil1H2DKFa3vdrIj^ICNdAvi9FGx!|k8XM3=r4r)kPyg>dlb6Cm!a3Ghr z@CG{gMytNQp0X+qw6OH00QUvTfapugkS```;yvxQcm-VEKu}^+L$=0vKJr1&<4sSg zIa(>pG2Jw_1&No@yX+E?vDM&51(1@G2vj4oB@#~NEL)_NlzcTxa&mKj@4e!BUC68v z&G!^o1^7=V&{fGK;(^ZL33v#2YHfY}%EmcYuAA{kAOH&RQ&Ev!T#`37@3Hf5lz^Tg zU%|mQ0`+xufUo_isj)gr%*!rpY@9E|lwg+J(UNuJmZ(Y^eWGfLAQQ86)~UMf^2rXNc`eE3Qz3r(eyO_AjA{;w41OR2<~ z7ZVjFEhEzo7>dzMc^2bVC$rSG*`h18rzA8bkFNM>5}TmO<2N9Eap|8CWW#jHp=Y~W z);~>TLxUd6Atdi)+aj`B{?~$pk_U(G*_L{Xbn@;pAxi%n1po;D8g_D@LE1>7e~3s+ zzjAgPSb{Ud#i7BCej0Bl_O~Rq0zZu;etx(#1Vn1%(M-P%_bXb>=Dly%hJ%UPJ;C?_ z0s^t?xlaTvY8tgJWsahk7p zs4QCU?7;${eH0eb#Duq>bNn@7B<(!0+ z^cU#Zh>NPLw^gY&>+OvouY0(^!Ow?cK>uqkBd9VSgC`_Rd5g+fQBiRWgqulK%dV-Z z7((~UPlzxQZcOA-$$>yR1YJK_;0KiY#w&Mk$`lLq*<_f{RV!?R@`0kr=5QLnXdFzk;|ij`zduM3%b@IZd2=%- z;WC~ptst>8ku{bnf)396sqD)xa|6eJ6flX|*w_x5E;LBD3MEdRfff1gFNyIvZDCUR zeNYp*9D>u+iNJWZj>kkzE*A>$PoO&!1%01BWuG}ice2LA!2(8uvTayW5(>5{86%~X!iGar$raOM&V4(r-&-(h81XlCN`~2YSq?8m*b54)zu@t<; zko5ciDXxfr+MLq#P%nrd)bzNE3J-t%)6)}nYr2fMCxr0vOqTIjc4TDaaHa7WZd7ka z2b_n;>C~#SnO;(ScjIQW<~0j~4fgwZq7B*G zzTIE`)q+I^Q}{~8wXUzPK*|!h{Nr!k#uKngIXLlfJf#3eMI1SC5e# zF4q?W>R#l>Tu|Kxw$Y`>7M7CQe0-+)tX!TSH!wOrm;D-$gXObLO%&X>(tP@_rQ)yE z;!m!@b~K*Ik5VR-bP<;r1I|Lq&aSlG5tou8_3axyn1`KFf_awB*6@2!<7;kicD;j6 ziKYzC8ch}|CuI`!P6)Yp&ouENj8m-mBc-6pVpI`)AA4i?bvwDa9IqhRp3Y3^ zcX;Zr18WvZy{TTz>!;Hfs3&qE@YJEX;oGL=jg4woR1_3xrKQ7^TLpuU8^h^@1PFxT zY&X7qZ}OJkc;NkG>_xNBddd!3$Gpb*!@P2tu)--c=+U#_)1WWrH+#O`ul z%SI%b8cRx&ruI<}GjgV(fL_0)W3Ou(8;&><%f(h7u2J@6Sv~48p0Liq zbYBMNF5gO2Xd{fI?w1Q%n6^rSc?OHGr-{S?*i!V z4>L5{3|1*i&*2UzVZpouD#nZv_J5Nw4D75z;P{*Hs^@K7Jq3 zXJ0H(cZF)Mw;%39x-is#YcB~28+b!|=eWOCMY{Nsx#4z18FGA*xcz`8g}D$z&r*Qy z*FEv*`y3*erym+SkLg&;zm38O($0x}!ue=Or0Xfa3+Tq!3Jt|GpXr$5>)RXz->*Lh z;@9Mp)a)DYkqPg=!n_H)nRuPN;9BTCr@`c1(felTKyao9i9roW)G#^AeFn%W-CsFx zltl*>idSc81fxE4dduz@GAFkkwP?zxcsyO`>I+fyc($Hs_DhTnk@eRlG3ffbwaTK? z`l|F{8Pnrf)h6l-H*t1_k?+ni>83)NK@I~p#dK4A7GJD^BZJ=k(soH%(!?TZh0>*b z*nXT-9<@@Ozp`&cMbae$(sYuc3kI|vsi&Vom6ppm_^vT=hkvpWG_}!4dPIc{kt^bC zVR}@3zjR=tg1da1I>#LaRPLl`S}RPtJ$iy&E@GXpK8alCgsiGH>^6j4aw)_@$X}yN zj5Xv>JI7|K;!LorWlwg*kx3`070csJ6g5-V{EstCYo3n>^?GYc7L4|{e(Q3z^E~kQ zKxfMhm0izB@NLUNV#APSs%OqY`rE`UP3m#o^AIFF@kW(|Sxc?8$G!^d9QlXaIdMCoUkU0kfC>Unw82AV5RMqf~En)(cEYBmJz8f2R5UKz>X z=r7wZ-v5?EiiR|oFv@fE9CZ&K2JPa3FteG z-5(?Nz#atZm?_HRKFmNEIrb9<2f2o25>>w+1JQ z<+;8@x}Q9Ow;R|^qWY%l3SZ)p*k;qqR_pDhI7lUy={gtEtyQ+YUz?la;J)J}!=O@p z16xqzr+1h6G*REsJvVWY;z>=yrB&o>+ZW61peCFvsf8@Xo3k_JXn}IruOUCPS(2Y^ z8}Z}R$;s9*Dkw)wT=85EMcytCA2C2$C zH4?7l7QI=s@&!rJJ_c(D44c%G*$bUy;`lN=o`}ORLiWeY921N~ zcS+b2jCVbOtCFNa3wSr{-J)SPZuvXQ_wTu@v^aSr?ig5-a9FPCqL5O!0%@^6iVdaZ zuS(Y@xRHw!2A5gp>^LF^5`DHIc9PGKcmq0szI6XMyu39hKVPDrm2%3?-=1?Iu&B`a zW@&M|wK9eo(xcJ+CF$Wp^Q!{tFlG#woWwGgd-vB@($NocuM%r;)$1&l-H|aizc2UO z>$AkrderANdyQ8m0ICichK!7iI<)lV6TRWkOX7ky-LOiJdoC$gc5erF*bhYeRI;(l zU)Gik=gdXf`~tW1F+xompie1pHq{$6q!Aox6FPRD-TeBNv#y0(gK8TL!<&DpmP@?* z+UqI&aE0ab%mkAKe_>Uep46y&qnj?!$0g@&Tg1rR412eYvtrEhzXHz)F!wb(>$s}9 zxrh&+xSJ2{reWUivo^ARR=-Oslh=la@>&(k>r0LQYVV2RPF}63h0G@PppMCRYT=i| zq^kPZ4jB-s9Lw6~)hL`hV_p+^M>uYl(Vy$>xO4!+j}@QGe!%c6&>GyjJwRESX+{Qy zQ-JnI%8ynAv29~;DcW4I?sg2PilEJ}#^nHrz@>|`YTKR16m+_}y5jEc&ZSG2xPJXQ zB_$=4m6c&I7?eLD{>V%}%v@YtaC38$fKv#ExOFCGS`_chNwt^}&8U8L{3Or3Z1bj9 zcW)aDdE#%U<|{aMF>m}dlV`W8drTIf`(h(=zxa?1kG{!@CnIf-ZoeTdX=x*t%{{ZX zt~07aF4@1-a@F>c#QX_ft7!2(zHKkM(OQ~jrm2p{UwGg?(?;GvUX4NiMf1;YVBJ9M zg^QggZx;X)J7r~Ml$V!Fz$rupb-?NB>M8-J5DqEM9%{S%V-azYv@Yge=3i%iu>^&*bH{|rk) zcCx67KBslb%Rd;%Rz8n??;ub0a8_=fG&S2STaP%hCzyz#A@D;*?eLK_4(B{T)9)&4 zF+E53r>AnDZzQiqpqV4Ji$(nZ_U=EXsVj;D__r-2C2F0hJVAwnIIN-~%R zx&(`h1T$DOe_+sI1n1@;E;t?Pm@uY}O~@jFY>3&yObleqnwhdJiqWA{x;USifhdV_ z3ke$?ZTCmt>$`1VD^M#E&nIc<`_&f6OHaYQ>u^=QP|GZqq;_@5+6s;bq*h`l9c9q^=PnMSA~jrvFj0t!X9HX-`Yw;clsmcLIwr#i9R@JKUu(N; zg;<`hf+;JN`5%V%UNcS|%Va14+_;1ZXBr~dVfFETxNb1pkxL=-#Hn*2Pt1e!rVvnG zgJZna{d`_FWQzbSNP|oPcVW^i41V8~NArS8qzJ>gXpR~h)%YOeO(S;cyk{;2ddD1o)fd0iYRE(mqT*& za^8HX+3ntDwEV&sFO3eO^T0t^rLLQTDE&%gGuuN=rP$RvApSl8?DshIwN|11s^8^P zrp@qfab($FiiREz_l1e14m(Eg44|vA9zFMbE{-)Ik7-oj_e}>p?KdL}k*D|0V~6x! zfefF;A#)bemSte|jyBlF9)8KRsL~?k@P1l2K_^+wXyNW$M+bc_< zNM!!ABNn*s^3PvNcAqCtV1~^{fZu=SpPL~|nqB4TQUyc8PlZC^o}(5K;rU4qde9@n z`@Wdrdzg@!)3+C^m+h52S7*75>+>M4E-Dn7K zI-o+~%Y24WnSzv6KxeP`Ior2pi7N|5s-Ofy>y0@#2PK;|urv#Q#Zg!q&9F53pIZD? zZ7A>Lwxj@CvszFs^dcP_M0?d*@ptktU{8_nKJQ`mp{rucqZqRhI^Qwiklss*(D|5|Y>8xp$#3#e475 zBtsSne$}9EPrxbDCh#ZBf&3*Q3o0JRqIAgTO#N4SQm|PY-yw9$Y!c$lbHB{+=OE;X z#+|D16p;XcvS=GjaR8u1=K2bzz0f$U2Mz~p)UJP{1cm@bJ{t3J)cFRgY7^>?S3>`g z>UX8K1fMlmdiC@SP6h4epPYGS=5!B^Bt_qQ8 z$KwHbj*B_69zGycJm0kGtI_FtJGAeE{ z^m-Fa>y5~a^O<9)-Gr|@W0=pTLUdLkD$6z_SIY&-luiL($n=A$3n#zrhNVwj0#dnf zF;dbE$bH=e#4DMAm0ikGZGvHm#JQoqmmj|I z`;fSndiWZ@yUCNxP#!j7qPGK1>sh!STyh^!Bmgh0fGlSVB38sg9w0p-kI#eSQmeRQ zflv1G#U$^!qDY1;iCKhxmSHQ_eH*_AJ4VRU$}=6sMfrb19=$8|NZZin*)-Jrh{pU! z+&+mAGNb70laR@y3@0Ik5HbyH7L$TcLV}}!lMq4(2@wsU6A~O14G}^JA%u{yqJWbS zLI@#*gcSvxgb+dqAtbD*N}Uiw2qA=o6=gUHA%qY@NLW$8NeCf?5JJN0f1H=1C=UBR Q=Kufz07*qoM6N<$f^;=SFaQ7m literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/tvm-device-value-flyout.png b/windows/security/threat-protection/microsoft-defender-atp/images/tvm-device-value-flyout.png new file mode 100644 index 0000000000000000000000000000000000000000..be50eefc3ba650e7cd2204ed09ca59c786f733ea GIT binary patch literal 20689 zcmd?Rbx<7L-!C{2!3pl}!QCaeTW}8$+}$lmaCdh?aCbJoMIPuc1^~Z1W1eyj6Ym3?~a(OOK*H2X~ zzvg<5A+v7{$-M+vaP0h+YIf53T0Crr=lD)y$s{3>k&$B}o@^HIAxKC_ay`}ciGjxj z!@$7c;9$!rbPV9xJnKuQ_nQ~%rrwIvu*-_`pe|TA;B8j1dTV+w-dH0~t1nE&wU4lv zKBp_ELme+Oya_m}>cIO=Cl*-B{-;&!Au7^R zb_p2HFhC>53h!<%aeX(QFqZf`IvK`)J>YR@{oBAff|dZF6@RY(pKeMu-`^(w|LCAd zh5VXDj)%ft3+_V)XSmwR@-ehk64||{uJX^9PNw_@9w`wKN8yJESr{j_pzC|u@*dTr6#BUwgboQ+-)v ze=F%U&&C`5`$-2>$4iQJH%5h}yz*P}lXkO~yiY)nytf=9cifu7awp*RZNEDzt&RWU za^NGn@!bW~2ovcMxq1LK+YI#aSE#fJ@_eU)Y4OtZj&1E1%!SikA^j zF7W*#?DcGPv=maj;-^;v8o!EOXjASi$?shx>K7qyTIvqkoAAK1tBeLL48&IgpvCi+ zMlX3j0!vupUBw0KUWGd;%-=zUP)PyeB8)45+NTkI$FKDEZ*7 zS;9U#dK{w_9=nJ#>Fq_C}X3S%*?P z-B*BqIQfuw@}0qm8rszZp&}DsOkSFff9VBf*%J!n{KZAKt@5bC&RK57-~x6y>(0sf zERpE?P6{^6k~^}!*JJebRP8LIX09I=)Y|k2s~g-NU#1NDwNUZpQ~{s=sYmxwqPP_F zD`86QRHznr=;|i#~=Bj4fu)bo$nM@`{milYE^|N zE<bM`e3XVea>{+o(;Bz{5r!--mz`RbBN@Qrd2A z5K0v$n9>BdRL+>6_1t(u+J*JQTkj7Z4eDvJ8$okE4p?XlnIDSUuU29$i3tC0I zJz+pkq_pM#xcvv6>_uNl{dyzrCip;0T9mLy&w9#tr(xrE-rpyDw)%>j@5m=)^ICvY z3>c(UPv{t}nB*rccjjzC8$vFMAv-mD{`HuW{naKo8R8L;wA!`czN@DT6fb_Tj?b^Z9wOVbtyAC39)y zgU4B&k8+arw};Uh&a%>nxERvY61_HjFpI#Tfc4I`mu#bsdgPOTil9XM$P0R{w=Bdw=fcqX9c`3TyX|(LHgS4!PAz{6Z zW59>*DU6evG^E07Jgh<^;PT`}`nlt41L24Dh1 z3o99@GUZd`M;7-2*GShI2#H=hke^vP&jq~E5!x#>OZ6l;;^0~YyrE93$5GDj(J&GP z!WIU6l?|k@c$A{#El< z!y7Oy{NXnP;^q?Uy(bw73H2y@L#4Lhxkr~oDB%+3uVZ|W!nYf99N5R*bgWO6(O_T2 zZ&8b=B7Ma+H2zM8u6tYJr!5W)U!hLCIfH*zL*}_%cqqbt)na;{>Cme189;0m*JgKz zcjM#V6@U8fm(R?;J(cnO-5Yd1zay;OGs`7Xg_WdZCX$ z`RNx|O>}?XrCj{EwBI8b^S(%Um&4qM+tMbKu!rxZw#Z#DU3nc@`8W*w879u@>dtkW zy!Ae^uNk{mEK_^90W0K>yy=^odtt;ZF(>IR*=V5 z9a+1BvK3wPn`imZHTj%}i}@?NE!omR@aT+y;^dc^@fHDUN4TD|BO4>|-7eu+`#DY3 zHx~jElh5bR6{TOcXY*W*b;@XX6sY-wp6?x8jb&hNGFXixMHvlLQx@zne;#yOy`W@y zIAZn91pKD9DT=w@V#24 z!*{0xwzbWTbG-%*Pl)H;Jhy2mg{eUQ9ud(Ay4u)10%muS1-l1vh0w|yz2!gTpCneWgg1puin1%*{K!K}rhW8Buqka$Y z6Hcg)F#-+n4VzthpI&CZ&2!}gpzC}#6L#RF(e`2K$}~cR>A5Cry+X+PP6toSy6H_B zHXkUo<_2wSe`53r;)WxpQdIBsV9rx$L zvn~%O##;Wshb(%#@Nq{9ygh5mi{%jri$h)M$~u?7*@ywl{MOF;mf%;3ya3pub@ObcS_H51Fk@rIQ zlH;(y#m!6y^VyjsbXfRmR)+!)j+{`7R59Eq)88&6nCd_WU?~guFaV|_p<&-ed3~(z z{mUNa2xwm6{a26DN}!g<998}03-#dtLk^k@z)DxIgh^##COk>rojiZlUqGu|o|ecR znF+hJ`j z$P!3CSXbBD?&+1d_88-D=Mwkv(qDMM5xTy{#U=cT;?<5M#+r3E#>M2DUE@2XW{4He zzP7oD+z0`J8N{eeX=$sxDu1Vzl*nqZM%52B`B>9*r>l&ZxN-RjDY9&Fy0?7)_TapG zjL~;42qAp2&_2(QzG^9kh$L-3A0v?>Jze^X>Jta@ueo~?^9_|Ps-^T`ofp+2yZYSg z`5&b~|Du~(GzX*$UdlT{#F!S|vG5Tjws?68UEFvwP#?4)XYKWR7nrGAI>*1rkzlCS zqoykLTupAT%gn@x57#=*X3*5dbRhH z)r^^ALA9gpw#msmxwI&xWjvj4xug&C=(*dIX+WGj-7QBO`m7JnN49Bj`^H zQf?-Meo$y5-$<7qcF1t>2B);>gdXW;B5c#sMlLyVCnIzI9qFN#QoZbj7#{@_7ylX- z2Dt0TVU$sY=o;2|KUaZ(d{|Q?)`T^~wxA|z)Z>zL?~bab3&Nz!kcN|81@w&J#X+f^ z1|yY2;hnK90#j2EPDWB{YoGQGGgDn7RCJjHuC?I)6+s+^J-=R@*aGio8==_zZl=B& zcIvWXExa3v@8I}?fxL13xD$*>53;NVS)8`?r(qXQVw1MID)zn|mFoif68-&ax{5Re zB~m+D)F4MUWp2yr<#}~23W7P;pKg^zSD_0=*A)-ie;U$jgYTFqUdon=q8nnp1-38G zba5@>ZY)x*nTDIdZflJ=P&%IUQBvO#21KlRulDL>zOPl$9yVI^r}N7&m8Ui`NVMt7 z%Vnkzcno-6LZ8JXO*utuP;5V?vbt-hCCcE1pOc{q9C_D*`?%%qd6{L@AdKX6^@1zR z?#7eMtd_M14xCOFXl*WcYM+~lD@yc+@q}w0tGOAN9rY!}X1L=HlE#`Tc2u_))z)Vh zrVB$l)O&j>hswd*J8922>wOyXh+V6xiMVejEPiY`iMT|?+!$qk|4OLExjXH54hxbX zW#GSv6!Q$Lur8A5hQKkfKgQiiwig^F#RT;9Tj2Ot`OPh8E%IBNpX8P;gb;e5_CW|pEq~kGg2ap(Td-f7IwP8=m7(E9}v{HGFdFHqUUQ`Mmgg>>g>V3 zRNLw$I!lIhC~7b4Z@Bov&5k$(2UkZtKFgqI2?-Bx<6(=t#|Z|L{+X$Cc`1J0v1t5) zE&kDW=_$jyH{Aze9}gS`swM&(QH<|)tq&^v49XH2#ijNa)i0<34O3 zuP>=_+U2B`!z1x86+RR%T63q5*V19kB~}*e`S5642Kl>9)|5X<9@<~FAk8+OY#nC(OBx}c6t1YR5y4GOMl>Cxt<|N^Erh@SHpHvKw?%6!k zfn&!Dyf)>|BC{%)^7o#$iFuaBC^Vm944-I+>E!8fOem_pu_g{TB4PdL9Z&gD4c|z> zK;*h~HGAthKxcx}Y3JA=pG%<~)(^cJC6n7h+`!t%GNZr|yAw3lcmwU5@1zOW{v5Yt zsS{|#A4>4nb{<9s^I~!|NXdLN#jApd?MeHmWVe zpLx;tgI7)6^t?hl2Tfa3s5Q4fm=M-&JfUF_U9gz;$3hVUj;aNFxXLox^s~j+H~oI} zgq6(!TTXn*U!1I)kf8$^+4SI)CrO~86qslkNPYc9^-6|@8+h|9SS%b-OP$0nNLbnpiZi}uRuQLaV(YA-;Tp)g^OZix{AGfqkRlTO|5KphyZ zKP8*4@McCW+d?bC`eVu`v#6k95vID?0Ns_~U z4;GPOCEUjg2x?%4d5IreLwrF*I&PV1kk7qAACWiWX@Hu%utJ}VCfL>lR zV~Z-S&-p_Em{jNhb8e2Jt`a_Pj#68sq}kT}IGEA;D~M7_S2js-BURL&EC+Xx_7CM2ou8?rrsFq<)>$GZjTj01ZcTPnp}o8Lt*h|4KBgaW5wp#_Y)`C& z9He10PB&_3sk7#JfOp zq~TBe73U#N(usFf46TpJpK1IQbIjU)!WBW0%zFg|RN#PO{INq3{|br5vFTm-JntKY%TwAmumXojAC+b9XQLbVz+g!>rnq zH@O-%3DuN-xM|;YD}`03AdPB1w!?PxK8)?9iWD%AF$7JP%j(0?ZDDh6WyE#&O3Rlt;WOayR(SUl~}R8BGvaC{d0gQetIvOj z_6_9diI=YGJpP5&#+r8Q@=xc}<0GG&tL%-33+U|8!GLb<95+|U(b9@0lHoUdI?%aM zltt`GYGpiIU6N+S!ACHha^=Dj@_l@r&dp6gUrWO zt0H#yU-RTDlwyn?>w3#$AdX(zzp)9rteeJtdE+Gwf}J38z~=QgGjKY~b@Wg5!*r zc$fGMQfoUh5yqoyI()|1d=Ao{;&umWd$D#x+&mL5N8rFCBy}~CY4aW>-LI-Yo&yzokl8it5+{gz~HfFYp9fWw_yfPUI!0$h_WiYF6zLT zmYGUPtSsJK%}GuzJUOY8-EE^#I;_2<&(SBa`K$JF-JZ(%3`tu`;}##dZbxzrO!`qf zFP@omnI=GS){Ue{(R#`<67o#K>Ul%o)dnf}E>}w}LRzyST{3H%KNn%)=b^g%w9K!EPu&0?KVHnl>&qYqAT}>{IP-l^)1D{${A980d_9Gv{4w^Z$+SNRN*6lDS>XJ4Z16VMEw5lWY3{oY2FX}5@<<%1Tk#l)t*O#lIoW zDBSVLp{hjW<%-x_s5?)Z7|c^F~l zu~i$Fr%<-yCb{-Y%(760+UND;zB+0bzJrZ5rV*Z@I~8^8{vnzY4}ZB~C$^Sycduz$ zn!W0F=QOaEM@LM4Ak&@AfCKkVbIDN6w~?uX(V&LPe6ai%GDoTf@m=`!kYFEtV)8T3 zx4XRAkw!5l<3q!xXO zPw8!&XDFdn_!J{SF#>Rb@QqR)u|5ZLUfF)(-{%=8KNrsrOoOwPQWQp8W%fF?GI}-q zHGahb5R7Ut^2ijrQ^$6(8+$M=Srb0HP)J8taQ~+K}ebq*I1?86J;sbXdoO0h^hOl^ew8c z&-yJhgZywr$`;N05@Bi=ICjbjqzEp{of`Wna#C@utL#VY=c2ACG!lk;;c$L_=Cm0h z)C0Z;cA%ueE{BxfhDB~~?t3%DM`WrRrGcT2bs6ySwd7>L7Pbjn&5)Sz4>Uci4+7dH zRPCJ#gLY+9GX$6>T>ZuraHUilj6B|%q?|gKi5)emUYd2>5j8BbruYhpe8i3<00#d8 z;s0){U%!8s#;dt(Q5A86^hAsZt#k4bxzQ#}-?j=)o~ojggZ6_c6W5A^!O?eVAGzSc z{>e;`ts~A}5Rs~!Q(h?>gq!Xc6&&d>??%K@4(s!w{lgwsUrE}Tz|pE2n4|u42~j$3 z)(0(tBe&wL-fS2Msv3r!e6?i{{TZ62@V?W$2}X9e$nTkRZtJv#uRSnJw$8*Dc>^Fp z`nS`HlJyTJKxW{dEWl9H_hnVYmvxkJF*UIXhpYRVkLVap^_g_{G{udcNwk{RK}A*O zwuZ2x2wAjJdfFr2#A>SV2khMC+JES`Vzo;qb2mU+p9!8JBH7Fn?gU0Q>U))d6LgKko0KieDF!}qMjjWki~J~0 zf9Jnww+Z_CNM@DDF#$8CJ&-7Cikudc`->LW8H)#cecMl|u(>n;^RE*Au{KXziSoY- z^wNd!?7F?W<{9M3ky}%Xb{zNQ^jJ%$H@B7-0=69_@f>9#oRIGdZBz(gjqTfa6f~om zw_M&8ryP>^*2?7Iumyi{ufr=gMTHDaR_(I9uk4a%3g4#b>W|K5 zo1o8!o&xf28uPVZD!O^)cDT#rn}A3u;4Z}S!=BN+DFlWCGDn{klbLe}z`mxY!Ykin z+LOm0Nn|r|*)=Bo_PMinO#Px(L)}|XLn+ca`2{4#MG8eS2S zpsan19^HGH;(9FQ*8Ckn*q_L%hh0dz#~h^Sa771W4~s=NWH>U>psF(FeX$eac)e4O zi6_LT61I{<(Ki@`!-x87$bZ#@D;DO`RdIiWg0igRQFw@=W?S*2tla8VKrggw@ zPc);!%3+{@wWExqeiQkN60D}w$`|S5`^cbR;}s>O`-cp{+MsHA7%rUmw$(!3xjnag zgo0EcJe6q+$s7lvr-Uyt@0XrITb;adZTi1nu`g%8v$4ChY!?l6JH_IWV!Wt%!V#&2 z3Kdx0voqHlmJL;WRaNZ1B#VQT`UP@23H>bO9UyNodPqTo9(NsOsTZbli%87ROSmbw zcau>!j(f5P4l$cD-Q24BZHAN}>3&I;(C6GqhAU%-JK3t{6`EuDA9%a?^LxiZ!>2?H z^b@KABrT@Ll2>-XKQeC(2`7)ZixbVg{b1lEjx!#gMPH>bJDp=pKR!kK5g*|VC%$Bk z#+>sDc6M!WV=+guYhe91Brru=`ETrQR3T5A5kc&(+You^w=3pk#HMNRRb-doYo=2A``JCvGo|xl+_Um%5jl z&+c#Y0+(HGWIy4Q|EnKIF=x}d_>tMI@gU5>=CZ2?&2A!z-bwJ^SkmiqwPYU&BEEYtqGt zw6u4$-R}fK;#zAc`!zMPv6iicD{+l^an1~+h;TprP2v2xW^e68fjiK>pdC)B#u08g z<=%C+<4^Kla=vIwv5xuLfqAsSbg9v5FEGc@x<5xb{0>FT$VbMFtyPe>lZg!6HP^Vi z{-akCk@DjqWoZh7q--8LfdQ5z*K=y^Kt-udB&6LM+mOBc#Jj>FGC8+%2?V``Co*u6 z7q1mk{qxn*{H1AgC950NX4Cd;0WuuTnaVjsVQVKpN5|kqf!k3V7L;8mh?uF7!k1bE{^LRVj}V$H~_ zwCaCrc1~hPo7VpNgcuPHT=Ou)up^%)nO?e{+vh9G%fPE$sH&dY5m73eG!gfTaJ#Y2E`KJC{-%mUQ@#+;f zb2iiv!Qc)<`Cnfs41Sx#%Zq7q77z2SamC8E)Znlc#`&YC)eEiX2RM8h5_Aii+6puK zO2Ng0E^NtIu$1K5nhwnLb>WJEQgK1YM&TRfvw8Ni6P7am@;!$saq(v zJ97Dna(zzRTHYGx4FzWcRB>UX;}SZ`Oiflzd>f!y%D6A)-T(wd`h97RBq*~%3+XD< zv};nds=BCJu54X?%{JV5xew&-`f1jao8KzqmS&)SKzO1VOhaPS9MXtnrcDU|{M}tN zbBgx?@xVx!$)#iwZ6VCSsQN=qVwGqYnpdpBl3UC z;aq%eijvLl`|Z5lVpAbQvTw5l7ueDN!UNf2Q)7EOK%GIX!>^t&nE zBhga)1R;fDu(SN!fi~WW{9~xv$&^m;<9&AR>1KXjW9y~(?Is3tjE?27l2E2*d`8In z9ZR_k3otZ5&!!SsjVWT5wpbA!TWOz*2N)bbkdMtUYp)J3LI?2x1udnfl&M#1$LR(H$!o=%Fk-bL`0m!XqT~2Au!>q%@SXQNK+ViDd z*kUznEjqEgKzX?Mg^U*t;wuVp>h?@M5p}4Af%p)A9AnM<5fPq$3Sm;kLQALnnD`Yi zRxdH^odu81=Wi5?<`tHr5l!%sxwu5s2EQ>klqkJr&R0E#=n7&;qKk zS$}BqaX8?_8B^B_Jpxr1P<~5+i+}&ij&18LRqNFE;9&N}!ZuF&xs#sBWv58JS%aC+ z+6_|fyx~v9!mWa+$T4)5a!I4+@cv<)N(9an&Q7mpE1i{Vk^=1^5Gz~cwHa6o1tgFe z7t+kTPlx+NK+WJ;*M5y?e)UL~1`O)|1WEtbO7dS)rvD!uY$2wm-8*BXeu&emt^g`f z0>2H!gET1yB4Csbh(5TwU%1o)Wvc=c*Q>j9!0+yCw%W0xOEuoA z#6e<@CIe_fN%TrlXse%7kaa!?tIG_&DbR3el7$==x3$fIv z5W^Iwng^AJiLzI7b5DSS4E%69tGOK)xY2nI$Ue4O>~uIOPta~Lb6LrRQk=_%z`SE1cf zoZk3jHFfvLw_-xy1FrtD72`Wq(8c#-MXQ0DA&8lY)a%&z!4blw@B*G&<{wMblKZb$ zY1YN}Bl7GOA5#Ywr~oqm;~Z5`?-+`_@9bVL(NfsR3m4MUsUS{ z2jXHVYN^kh4`F^)=nY%$h>05yCTYJ9NY1|SZLe{Hsj`J0h>@JI6Y2$nsb7XB7zl1k zh0Z6VhQU)O4kLO@ZDK~=UPdxs+%qALue((ur$};#>U#{;UrVmS9AtVrYJ0|ssL_C} zGnaA;gk3a4@5j7~|6v1iBjE-25A}d>zRSE1QH>XN&~W(2S_73bxOg{O*W9`n;y!pS zrA7g=$ZtM~)m_$c1i{jDKnAxUF%j4c`*^FE5QC0%aLOdp~zCPI>Bw;M<9kEeX*yBvTF;J|ktL^SlWv z1kftix49-#d++atoP0=wN^8}zf2{;mm_hETtv<*Gr@!igTj~!R6G;3!Yj+HA_NkO~ z=7zqcRy}O{7$y}TLGSY<@!&AR*Tk&ac_OqP$$-j^j>UX<4SYiXN4=W~ZMC=}$Rfp* zj#OrfM#W5ZvSvi9JrDKq4dhE@JR$K1VpcKvKmLdeg{&RPfPO~TRf!TM!s37RdIFYX z7U%U_UkS322O^o~@4R)U>3h9#ovW>z#n##7+#^G}*4qTwgNW~CqO$%xf4+P**O&=J zpn*~DTT?_)h4+)q62=Y~jSSWuIKq~?%jG+!nJ!(_fZnpgql)kF5>1@GrpnC z^2O|6#Wz1()oyYIEVlmQa1tt`&m*%evg=yeSn5-urys?*-+%fp$>T4$m zE;>CXHtg9cc2aL<)-%QaJKSI=QUre^Uk*~OXr!CqIZA)^Nt^6s4mZxS&3lC&)8vOy zjm$cN_`>wc(>Lpz+He1&hfNh+VcGX<=)Hs=!SN$u#vpsO?~CTyP4Ha6Ak-8xYQyB) zH+c;==9pPui&KncT}V$vL^e^~d)lMA8@EAv>+k>wfq83)Rs4Ze(NQ(yPY}zi&ORr1|a=}>HL6nWzp;DXD4nq7_>4k5xLIO2yWD1kG;OkadGR7SQZ+=bk?P{fXD ziICy)cO^mT_0Ce$MP!57fCFYAdroyv7&5Ue^PQU4b`VOaLH%zC_2tL1D8E;3?PZQB zizq`LhHyYm&H~iChAd*D#7AjZbPUwgBILkf2{NL;ZNu-NC z3R+hF1O+M6eyZ5$M2$fSGH~~Kf95z+Fx>8kzgJ~ zHFrWsa%|S!X%Hxw;;g?^kuieM@>#9CHX$xzkq`*B&wI5sPM5Tbh#WY*QC0`t4dufO z{(PZ;>}Gz7&4RribshOT9tb`ffM=?=BxK<`>qYXCf#zMH z^<+Q&oI0Xh4aCE4uszFrU371Cn?ee~UFS4+fG4FF;sSuf{^#WC599=e`dX+Hu3s?oxizP55w+ncP~tFy!h`DE=cM2?fy8MY&jc|k0phCpCwU~ zkxu6|^5qs!tbdTv3hK81k`A6%{oQ_Y{fboV;PaZ2nTZZZIES=W#wA2*tz(DkYFVZE zD=0523JRM3AYtU|0t}pZ=Yq|wc8K(ff=p5hFV1tFJ4w8tD`o31bN2)%*r0+p8%+}f zou)<-PCrDI^{wE|JRe=uOXejN9G;&oV(oWD=f5*^w4_5VS`HA@oV=}%kg^bZWI3RS zgjtaspI1+#pug*y?$wG|0RE1Cub=kH*DKf&+ESm;4gSJ}F+AK7UX+cpg$nu)K#Gd| zxY^47+6aj-!!k2?Z!&?nP!bU|o_=bS!hOwxij73N+&zPK1F#B2;`%VBhc0SmN%N-vg{ahJA z2AC~#yo%$QOD3qAEM|-;Fbn;jtUMR>0I^r;tYYdTl?KQ+EQ>Pb2tuA+h1Q%rCgM*s z7ohx0@zn=@bV|W@$Qe}Mnt9A;f5{Mhi_rTUP5C_{v|-`kxQvKnM5R|?&&HJ|eTCj% zE#3MJ=<22PbJEH^g$>5f(Yky$*`|bretp-pmf8SUQLb?74sSIxYb>z@0`(=42y|3u z)z`$0?EFSCy8qRtM&OtMtHPA}`6A<^)07nduJs^>+t=X;Url122z^_{ANf>EM)ut1 zV=PMATju2G;&a1728QW+dtt?kj~t4Nb|~ZFWQDo1(3X?FUjUKk%R^HDf!8Gy@6)AH zvOL-9nfuvpUX+#0ul|bb3Aryg{jz;2PwuauqYDMfODnH>t;0&+8F@IOHN4NwH<}s) zSQoiCzBVxvdAggyoQ2Ml*ev!=V>+YC;SBY+G=HruKYts+9cf@dG|?GH6H-itBu+<7 zy1w(V8xfueI(a(=9Y~3>W=XGSTfqJZ``UmYI`hIh0}!k+irRY2>S{ah0x-h)ibxf> z&np|wzbF<&!G!WtRGfH>jHDW7p`r3{z7EdcUpP5K`ireCbc^#*^ZlotzhRVS+0E_S z7!3W>BKwVx*O*YtS-}Q1QX1^!4HY;q#ppw zDMAM7!u-x*y8 zcR&mWwQlz0Kx{(+66$KDg2fVmQQTd1KQ4>2ZpXNCYJE+~fXu7Dhz<>Nha}1y0*HSr(JN~wpqlya`-v)GyN5pA*;wEpd3QWtC)1A8 zbkv;KW$*H9;+FUh934yHT|(Rou-Lv$uv5`xeF)m(wNM|iv(Ij(56onNARZDCnR!1v zEyEryMvEtU_vtJ_ggSCj7F*D#-47@??1m5Y#LW=EM70#9qoGNo2LgZeYaw(bxfW1> zSZWOdq9LhyqK^0|$aC=j#+ncRhMoWWUd&gPd`Qnidg5+8onZ2$GZQu%%CwS}g52z? zg(eQ<&9syHo(3Qf5p&2KSINvwnxd|s%|Ve+ zc_1eW@|bfA1U2nUdnd&NDexiQbM2k>Yn|_E>+7?}cSJ2L;OMm*ZB^F#=x`*vJNIRp z><^@0Ye3@Kpk?b7;2fu6)=o(=6Py#$$S6W#af# zvzSQ6=E)Rkyf=EHq`h+Zx>2B9f_-Luoc69YbFd>ZahpU~J=(nuu;iWg0Au{G0NZ(P zx3%z}Kx^85B4(sVewU$zRC1?tELmAZog{yS_`WRkz3C&15yB-C4|3*3&h_b*H=4B%;#g=R5~uZ%RVqW_Ula?6LGOY{2zj z&u!?ZBQEhX02x-`LITqpk&wr(`v0@OyWf(=47wr#)BcNH- zO)SenxhYjxuXEBQu`-q;-Jo%7to&Fh(?~Po;1ZjvMxMrk9ZPn02Xoqv6bUksp^&(v z8b9^2aUsu?HMG+cjc>Q}_h2$A5S&V7K4X+EDZ+?gkycR3;5A{bsg&ftd~o~^b?c{@ zWPQE1!Rs0}k5*k-^4FERv<(r+N}9`U#bDSN8|#BUsc?;tjyziYdeu(1V2W<%9A1+> zQQa&9&(NS!BDM{o>_37{1@uf?^zoR@UZPEcMpOfwWrA;oh-HQd{T}ME-eb0$inMr3 zhdB;98g^7@T_|pl6V396q*n4O)$oQffgg~Nb)qcw^xZDUz^9iJ^7{NSzTktNyeR(q zK#!X|htA!-bOXXQHaIA%!VL2N$`A%U(>lkgSLyF1N#c&wk}56h_W^QgYeG#2u&*`g zi(2k$_MAIy6et~~PdeTCEyjd@jE+A}=YgM)Y7zdq3C=(ITN z1M6sw0}MPOqW(;|j#jP7EBMdMQ+r6h5DR<*AotT2se}U7!jT_zbgz!s5P$4O&!PO> zvvNI2;%lgH>?cq#haETW20fHwUHK>0<0#93SHvjKJYj##87k{ANqz@9WlSN{rLNNB z^_z_WoR)YVFdA~GBorA0kzN{|R3krvMp&xC3B(S3*OY{s{`I>UNhDNm15Z#=y;zG% zTdeH6GDUU_s8BnK+b9gxSH-|0n2B1GwK62p*j=#`8hZf zYtW~S+Cf(r(hz{6?(!9%MFqHo8HDl9abO$kf6y?X(%sfQJv3VuE!niy5&$|wa8}B& z*^^}E#Bc!Jxi|&O)`KHipm99`@|aWaHF_c(CVh5Y-Ma*S22Cw302l|Be3%4OIT1{x z5M$l%Sp*+U^d8EcuLf_n9dUu?)5m`8sPD|1J)c4(*Ak5bUh!2rKatX z`+oZeFHN;#Ly*3vi~yjHVTxJm9vLv-4wEgfJ3{`|84deO&LfJj8Rt9NEyO0K>Z!XW zF^#Rgox90*Kp-Ub*Z&JZIaZ`4&Zqi%x>isEc2?lXeOy1keV1yKq@7!FUP#9^=fD;v zMbd{SCV-vV8N*JL%vZk8lZ8fOtjc@kO(u!hTuc!h97-~$EiGNMdEw6dqN$l02Cx7BwgX@~-s)9CYtlEGi2)oe_M>aVyzx}5 zb}~so65Fe+J_7LYCQl|VX#}v)Qub=i>P8q+SUx!mX%F(x6poR4QZfwaTTE2Q7h!F` zo;tCqlJkIhE*U4LvwU!q5Vz6<)`$~telm&jJLZ(M7&lF;)~n%6+o}pmjxukY+X~zu zI69lMp^Im*@^rFOZbzMAqq}%T_o=RFMN^&~>s2TlKLpeO0Xy+XOMM#^W?<_o&gACZ zcrb!_+B{&nCDFUs(_AP)2|VPCR88 znkJ;scbVRI8b>RBs~bA%1mVQaKXHwuQeUk%lAxVp6-@-0a~}EnWQXkL;VjvceO4e5 zZC)grj&Px#w0?$)1tU5ZV}@);G&>&<<1pt8F|b66^R@lSM|wjiXYOnXXi+mQg2Y8tf8D26*75Zz z#KAIZaUAQ$o4-pUe&*-y_e#5-+CI4Ig66$}zGD&pMb0|K`@Pp(`KY6k)b~k2K)bFz@5;S^QzQU-rc64+r$f!j)T z_f3;{q@I_?*$r^M(2C%E3CmT&9)SqK|CF`){#k`FyhfD3!r*{<%G*|p>oH7P0`qeM zpfbL%bM@vAj$A0T!_aZ<%;ljXC>Avm(Rj^>>uyGCO|bTiDV>N$HCmg#o6Y<1%kR~c zTZaVTA`-QQh=|$WXr84FgcVFCX>tZnEVjRc zdp6Ftycjym_@^wnoN*VXm3j=fR-CR?15_Mjp%u?-v7IO^zIQ;LR>Qj@37}N}Bj z^bHpI$W}_lGz0v?MB$qU|FB-{NE;H{PZX=(|GZd^FTG|Mf!CRKe~S<7^1zOt0n{&0 zOz>|WW0`YYz`cdhF}`S<@56%&UYS#hQy+FLKub2ESQ384FKl4FJp<}WElS*87+$yc zKjvy6xb4(_jj#YhV5$JB=3Fag;wAD@|w|#$Z-cAmwKWT*YF~ymx#&-&Z9fN zrKD+<3R6OQ5|;jf)F2B#1L-qiLy6KMZwrr&xy@kK}L)Ps&$LV30%liM-%GLify}t1eD)+x?V={d^7oahXBIO||zvq?#k^i}AAkW|vBJQZU@qmEdmd1k9w$(U^% z`)E(+viAv>wUe2j7=#h&i%*oK_lH{HEOrEDIOdn zaZ;!CGXY$F5f7$fnDVuUT?+b|2hM+k-{J9v?nMSU93tB+|wh0{k`RYbj(rAMcXc!m7tTkfHm zuzyov9614_3Z1G#zMO@up2WWtx|?%tAU}~9hr&*^IVN*X`1L}u8Ijk;yq)TrZlM99 zLNv&Gv$DGsSpuVcO17VFsieWcx4GEmx_RGW8@5$!*BkLRfI4Mgkes|8N9Owmg*b`f z>zu?|CTOV(V;aY3rvelu_$V$x_tlurobsjrP=lz?yDsY8`BUTvpPcb}?eqHYuuKNh z4+y+@yM6C#+>t4afliDYo*v2&HoP#Jt{6 zUT)x=QppjS2DdxIrSi-2`Sj5jcg>288udLmQF%l`EXV9d224O~m)$ndoH57a;w^;w z0Z+CfvlBEh_K{@yGU{pHfgo zKe}art?rD|pV#7M58`M4veL+Wj{sObf5q96f!_Q8JV*m#T377Xu977e#nXKf{7UbS zq5Z)Jz^28+LsJA3%qJRCnMm*a>(ne#B|gW|Zn^V9wa0&}*_cn=+SyD!!<;*902H{f z-V>lq;|+fNM)u!cKeky#JnOy z^}|xzl^uLPVGf?jFvPoF5_M5Z9$916lhs%?%KE^JIY5Qw6XEjP_Taw2meZv5OI`Pl zu=-zA7=f={6-{QbAC-LlckfVPXs6z<&_~DJlhG&AB(1Oc;vR%c2}^pM{rf2tlBpY_ z_N$Qddq}V(-DD4yzrRsIKrl>;bi<)ob%lzAr07IYC*Ay@XW*>{| zIkgNtIHC9o$7hrBn9HU)1Lx9d+1%$TnP1&a#kTqlLPe*3sqpe zt~`y0z&9wyYW=q-s^j12dZbjftyI8BBpX!c>x8U~g`>vD3^kmOL}uT0wD>tnKrdWq z$c8$zoC<;{+b-xiP3pvm9aqFyo$16gscE_0Eh@6X*c{^?q4S~ZzmlRLOgs)l1iY+lFE2rl8&!C zG3WBdic$Np$5kes<8Ci}q&jT?0ED=?x6#6yyG^yw#m{~%IjehLXK?U@GO`ubcc_jn z>UnvwcH(GdF=v+EIIJt}b8AfWK9&dz&Lu{mW(C@(8(p&RM|zk&H3W9j;xvA{=D6h2 zHThAb3cv25z_Ri1LoRWfEUdF#Ydqs?qQ+-BTwg+bdC_N{^`MH~tgF|3q%Q=gez#gofy>=%bgHJ7^}$Q}O&)iJATeK(Xx(M!M&F zU3j?T4abfC@$s+9`ovbGW6k!K8S`VZ(=wK_ap+JiU+48>{ri5~ye*ksrR8vg5w_~; zg7m&c&)W`#AuJK?vg?(sbxt+K-izJ7?Lp%_d#p$&tix_Yjj5)0EqAcB_0py3*Yw3uK!N_e>0}Cx#mfnKdbA_hqefK Md-{4*?g~l$8`7s_sQ>@~ literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md index 7084b50423..0f5af6bdf7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -36,7 +36,7 @@ ms.topic: article 3. Enter the following queries: ```kusto -// Search for machines with High active alerts or Critical CVE public exploit +// Search for devices with High active alerts or Critical CVE public exploit DeviceTvmSoftwareInventoryVulnerabilities | join kind=inner(DeviceTvmSoftwareVulnerabilitiesKB) on CveId | where IsExploitAvailable == 1 and CvssScore >= 7 @@ -51,6 +51,7 @@ DeviceName=any(DeviceName) by DeviceId, AlertId ``` ## Define a device's value to the organization + Defining a device’s value helps you differentiate between asset priorities. The device value is used to incorporate the risk appetite of an individual asset into the threat and vulnerability management exposure score calculation, so devices marked as “high value” will receive more weight. Device value options: @@ -59,18 +60,24 @@ Device value options: - Normal (Default) - High -Examples of machines that should be mark as high value: +Examples of devices that should be marked as high value: - Domain controllers, Active Directory -- Internet facing machines -- VIP machines -- Machines hosting internal/external production services +- Internet facing devices +- VIP devices +- Devices hosting internal/external production services ### Set device value -1. Navigate into any machine page -2. Select Machine Value and define a value -3. Review the value in the machine tag area +1. Navigate to any device page, the easiest place is from the device inventory. + +2. Select **Device Value** from three dots next to the actions bar at the top of the page. + ![Example of the device value dropdown.](images/tvm-device-value-dropdown.png) + +

+ +3. A flyout will appear with the current device value and what it means. Review the value of the device and choose the one that best fits your device. +![Example of the device value flyout.](images/tvm-device-value-flyout.png) ## Related topics