deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-19 16:57:23 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

ata for machine view

Browse Source
This commit is contained in:
Joey Caparas 2017-06-02 11:22:11 -07:00
parent 7be5f93b09
commit bf96be0c9b
2 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
windows/threat-protection/windows-defender-atp/images/atp-machine-view-ata.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 473 KiB

15
windows/threat-protection/windows-defender-atp/investigate-machines-windows-defender-advanced-threat-protection.md
View File

@ -34,15 +34,22 @@ You can click on affected machines whenever you see them in the portal to open a
- Any IP address or domain details view
When you investigate a specific machine, you'll see:
- Machine details, Logged on users, and Machine Reporting
- Machine details, Advanced Threat Analytics (ATA) alerts, Logged on users, and Machine Reporting
- Alerts related to this machine
- Machine timeline
![Image of machine details page](images/atp-machine-details-view.png)
[TAKEN FROM MOCK ONLY!! JOEY: UPDATE WITH ACTUAL WHEN READY!!]
![Image of machine details page](images/atp-machine-view-ata.png)
The machine details, total logged on users and machine reporting sections display various attributes about the machine. You’ll see details such as machine name, health state, actions you can take on the machine, and others. For more information on how to take action on a machine, see [Take response action on a machine](respond-machine-alerts-windows-defender-advanced-threat-protection.md).
The machine details, Advanced Threat Analytics alerts, total logged on users, and machine reporting sections display various attributes about the machine. You’ll see details such as machine name, health state, actions you can take on the machine, and others.
You'll also see other information such as domain, operating system (OS) and build, total logged on users and who frequently and less frequently logged on, IP address, and how long it's been reporting sensor data to the Windows Defender ATP service.
For more information on how to take action on a machine, see [Take response action on a machine](respond-machine-alerts-windows-defender-advanced-threat-protection.md).
From this view, you'll see other information such as domain, operating system (OS) and build, ATA alerts, total logged on users and who frequently and less frequently logged on, IP address, and how long it's been reporting sensor data to the Windows Defender ATP service.
[DRAFT ON ATA BELOW!!!]
If you have enabled the Advanced Threat Analytics feature and there are alerts on the machine, you can click on the link that will take you to the ATA page where more information about the alerts are provided.
Clicking on the number of total logged on users in the Logged on users tile opens the Users Details pane that displays the following information for logged on users in the past 30 days: