deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-19 04:13:41 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

explain status ring

Browse Source
This commit is contained in:
Joey Caparas
2018-04-06 15:01:40 -07:00
parent 1afa569b07
commit ba9252360d
1 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
windows/security/threat-protection/windows-defender-atp/automated-investigations-windows-defender-advanced-threat-protection.md
View File

@ -141,16 +141,18 @@ In this view, you'll see the name of the investigation, when it started and ende
![Image of investigation details window](images/atp-analyze-auto-ir.png) ![Image of investigation details window](images/atp-analyze-auto-ir.png)
The upper right corner shows that the automated investigation started on 10:26:59 AM and ended on 10:56:26 AM. Therefore, the entire investigation was running for 29 minutes and 27 seconds. The progress ring shows two status indicators:
- Orange ring - shows the pending portion of the investigation
The pending time of 16 minutes and 51 seconds reflects two possible pending states: pending for asset (for example, the device might have disconnected from the network) or pending for approval. - Green ring - shows the running time portion of the investigation
![Image of start, end, and pending time for an automated investigation](images/atp-auto-investigation-pending.png) ![Image of start, end, and pending time for an automated investigation](images/atp-auto-investigation-pending.png)
In the example image, the automated investigation started on 10:26:59 AM and ended on 10:56:26 AM. Therefore, the entire investigation was running for 29 minutes and 27 seconds.
The pending time of 16 minutes and 51 seconds reflects two possible pending states: pending for asset (for example, the device might have disconnected from the network) or pending for approval.
From this view, you can also view and add comments and tags about the investigation. From this view, you can also view and add comments and tags about the investigation.
### Investigation page ### Investigation page
The investigation page gives you a quick summary on the status, alert severity, category, and detection source. The investigation page gives you a quick summary on the status, alert severity, category, and detection source.