From dc5e5f2e92468059ca332f3f370bd2a09dbf877f Mon Sep 17 00:00:00 2001 From: lomayor Date: Mon, 19 Aug 2019 17:33:57 -0700 Subject: [PATCH] WTP updates --- .../web-threat-protection-monitoring.md | 12 ++++++------ .../web-threat-protection-response.md | 2 +- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/web-threat-protection-monitoring.md b/windows/security/threat-protection/microsoft-defender-atp/web-threat-protection-monitoring.md index 0aa7c2cb81..b7f868a2ec 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/web-threat-protection-monitoring.md +++ b/windows/security/threat-protection/microsoft-defender-atp/web-threat-protection-monitoring.md @@ -22,13 +22,13 @@ ms.date: 08/30/2019 >Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-advancedhunting-abovefoldlink) -Web threat protection lets you monitor your organization’s web browsing security through reports under **Reports > Web protection** in the Microsoft Defender Security Center. The report contains the following cards that provide blocking statistics from web threat protection: +Web threat protection lets you monitor your organization’s web browsing security through reports under **Reports > Web protection** in the Microsoft Defender Security Center. The report contains the following cards that provide detection statistics from web threat protection: -- **Web threat protection blocks over time** — this trending card displays the number of web threats blocked by type during the selected time period (Last 30 days, Last 3 months, Last 6 months) +- **Web threat protection detections over time** — this trending card displays the number of web threats detected by type during the selected time period (Last 30 days, Last 3 months, Last 6 months) - ![Image of the card showing web threats protection blocks over time](images/wtp-blocks-over-time.png) + ![Image of the card showing web threats protection detections over time](images/wtp-blocks-over-time.png) -- **Web threat protection summary** — this card displays the total web threat protection blocks in the past 30 days, showing distribution across the different types of web threats. Clicking a slice opens the list of the domains that were blocked. +- **Web threat protection summary** — this card displays the total web threat protection detections in the past 30 days, showing distribution across the different types of web threats. Clicking a slice opens the list of the domains that were found with malicious or unwanted websites. ![Image of the card showing web threats protection summary](images/wtp-summary.png) @@ -42,10 +42,10 @@ Web threat protection categorizes malicious and unwanted websites as: - **Custom indicator** — websites whose URLs or domains you've added to your [custom indicator list](manage-indicators.md) for blocking ## View the domain list -Clicking on a specific web threat category in the **Web threat protection summary** card opens the **Domains** page, which shows a list of the blocked domains prefiltered under that threat category. The page provides the following information for each domain: +Clicking on a specific web threat category in the **Web threat protection summary** card opens the **Domains** page, which shows a list of the domains prefiltered under that threat category. The page provides the following information for each domain: - **Access count** — number of requests for URLs in the domain -- **Blocks** — number of times requests are blocked +- **Blocks** — number of times requests were blocked - **Access trend** — change in number of access attempts - **Threat category** — type of web threat - **Machines** — number of machines with access attempts diff --git a/windows/security/threat-protection/microsoft-defender-atp/web-threat-protection-response.md b/windows/security/threat-protection/microsoft-defender-atp/web-threat-protection-response.md index 5afc0d74a6..6fc25310e1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/web-threat-protection-response.md +++ b/windows/security/threat-protection/microsoft-defender-atp/web-threat-protection-response.md @@ -26,7 +26,7 @@ Web threat protection in Microsoft Defender APT lets you efficiently investigate ## View web threat alerts Microsoft Defender ATP generates the following [alerts](manage-alerts.md) for malicious or suspicious web activity: -- **Suspicious connection blocked by network protection** — this alert is generated when an attempt to access a malicious website or a website in your custom indicator list is *stopped* by network protection in *'*block* mode +- **Suspicious connection blocked by network protection** — this alert is generated when an attempt to access a malicious website or a website in your custom indicator list is *stopped* by network protection in *block* mode - **Suspicious connection detected by network protection** — this alert is generated when an attempt to access a malicious website or a website in your custom indicator list is detected by network protection in *audit only* mode Each alert provides the following information: