From dd0802857ce4c7fc462b72fb98cf7e127b471445 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Wed, 18 Mar 2020 12:01:21 -0700 Subject: [PATCH] section updates --- .../images/tvm_config_score.png | Bin 26002 -> 0 bytes .../threat-and-vuln-mgt-scenarios.md | 47 --------------- .../tvm-exposure-score.md | 55 ++++++++++++++---- 3 files changed, 44 insertions(+), 58 deletions(-) delete mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/tvm_config_score.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/tvm_config_score.png b/windows/security/threat-protection/microsoft-defender-atp/images/tvm_config_score.png deleted file mode 100644 index 4da702615b2d88d9bde76e66a8109d0dd9ba7f81..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 26002 zcmd43byQnl*Djj+uM{cnQYcPvcZxej0t7E4xVyKdrFe@a#amoM3Bj#Eiv?+Lr$}%q z?r_rg+%v|#=Nsp{?-}DeW1K%ScGk|?GWS~hShX;dOGy*~*gIeZmDsyS+jn8zfm`15f zO71FF`c_67jWI9h)s!_t5IPpFXk?X(17k{sg;QPVm8 z&&cz%;*EQ27w-GF!rByv(8FWnH=);KrnukmX+1~MSI8<%%3CF8_^z$Oo>_(MH-zk; zQ~&+Zx!#dr7@RMn?rflfI_j;ywtDymXL$M@Ab5I-+L#$^l_f*VF|%f`qpENR08pWj zNgSpas>R1_5*6AN$w`qvz&$4_(<3_#v#T&}VqlAKvAt=LPIlbey8u8O4;X&*j?0o+ zD|$R_B!?3tN&MftqZ}N)W5yj>!R)$pAOD}8-v*h$0Ko5iQ4|0`z`b1DY3E-%+yT56 z``2!Q|J82TX$Y&7nR}w=+Q(D@+pazt=fR%zVBSvxwzu*(bAudeq~6d08Lu~7r;KNM zCIBi=n&;rMl{MQgj-t}-D{5pIlVsK_`SBrfIeej2{j_R6$rkqnbDHk>oo4smx}w=< z-k|Veb3X_zYTC|5vcR#^%QM)at z_6IG8zTkz_tt9VoZs&wj>$K(~^cdwP^#E0a^{N!?X##%BP@FOLyjHqaL=y93J75Ev z=C#d&|8FPGlAfir4N2Q1It;FXGNWDDw_JuJb3du z#5iyp_4-G3EiLvvrJLdH>OYY0vT39%=iWvdPmJg9nPID}ANuE^)>xxYjeA}aRuii4o30j*Np6Vj5v+sX2oVRNHPuFL)c&n; zMvGn9ayq*%R@_7RoAjp`x-n+uZPb#Nb~v!XW%%Y#4W>zid<{1fQZ5^x zmnW5#zic*=BTC@YCO=U$wJGvdEprjQajwfZ&k!r~yGh8Te0P~Ji>$9(!9QDB1vS|A z)ph)_9ZYuD4%8WFvTaQwGM+7hM%YMgoV5P2uZ+s}d1NeS{*1^qQd)48HJ%Dwgm5789Q`T`}* zxdV%lia#+zX!j?XgCemtO%g0SVw?Q6dR>OxV9%flwNK5lp-)!ufFN7Gl(M}H7S}9S z!LVjdGP`Rth+16y>7~sSR4PsM!O9j7?Y#JN}d`-Mc>Y^UT}iEysvw-+JC{a;g=ojz18-x#i4mk8J~ z9Lh1xG=^^F$kZKIxtA>;LW1Cl%jzQcDilzyu5C)RRBA&sOVo($9hD+;h!K0l(Na)1 z5#0vsLO_FmxzorWm(SxS4OJ~BMfEO=oiPz2r}rJhFZmXLZoi|^^rx}U;*^(UuMyI< zWA#)+N8P2O_&VLW5Fov(qm`qq$j_Z+6Rt)vW##+od0sdIOJ2L*bWdj{?%NR(ka)moMwWzc5vaZU8dG|DdLB)U}f zd)3eI?|K)R+T8gf%)$)rB`po=+a`cg{VZsT6XIe8@4K`=EzZ&n726@x_iOF%*{-XU zN9E2%5N$xd)}8jP`H^tuHcHZE7VhV!8n;;nLYo6yDKIf%w1rT(!O?;3+6=O(QajA4 zV2!Ixk~)9lDQ0+m>R?mCs~d|6E^|;9MHm-a-E|_Z5Z}qEJyy5Mfpp924(Z+b@|=YQ z9HVE>`{@aO;TFF_Se#=ke$%*`)kPTS9#gL`Io&AG(2AF(pX8}N4$y=(&gG^~tO4|7SlGb5f|kfCrsu{e{kD-9e-8^LIRU>| zg7O?<@keVq?PvbhX$vl6W++36l;q*PmZW&1EWVy(v2I!cLiBLXJH9_V@l>{aAtv+D zTn2I&L9~$0jo|>r%Kh}hG!`uU%X{#N|T@T~`d0e$Z=(D+wiH%tsn$tcu4 z+|u16K*O#6s)JuQZ>ZDXnd>@7n$>kkj#cycftka@`NR(q3mp)#SDB~D1?p{t>L}1$ zGOA%WIrwcs$CH&sYvVN=R;>#Y_aF5vlf@X(wbmt-IDZC0F|?iNt4ww|)AW=+Ab4}V zuKgaUYRLEM64CNAmhtsHVNw=$@IKmg>j`y3F68sPY}ihyx1I0R3udM;)9llX@>~O* zmZ!$7rF9ODf@Wpi3nY?`1K*!*a8(yHW#<-bg%xkfHb~FAU1ynfR4nz^$aQ?hammJA6nY*%)8Y;*2{V&glN)V$*a&fcL1M-QK0BNrg|0S=Z=D=^<%A9&5BWOUAb zY`?7eL!Wr_hJWGCeL#*pO68vFM9)2gxCNaDdj#Rhgi-MeQa%+dXtZaqZFEnV2MW-TDiXPISKefdtDlZqkgq0U}X>idNr znL10L@q+|Tzq39C3*Q=ZxzI@InOg01Q_)9$18})k6o+AD(%&p{`hib$@#sH2$K-+7bk6}u<`&% zB2PNwhaB!FV9Gwt%I0SovN0X0SQgW|d@3um(}eY;*mi@1m!I}tn2Pho2)Va5pJ^1i zOzuaAkUpU0Rlzv{{dOnEUTG5iUao~H41z2@--7}}kY)W}ALJe%(3ecXMU~24BsBB* zvkh_xDm@Wq?1!86doH3hS3c&dQ&>pedB1M)6<=~~l9in{!c>Dsg7crS5-)eDRV zhGu>1(+7m0y%DxNP<2+58x9QJ%A2y4Fmp>DxPM#8Kk`4V!B~lnWFkyKx*saQ5Rt(jX&7@CF z$eXxrhomeFv$dl{9(J*MO3i4SAOJssQ7BAty&g@cyQWo9l{v<~>aKst1UIUS7k z`vRu)S+1gu_F&)keGtCuBax~#NFd_+wfEG{?_4>Zj})C0RCpkyX zruG!jnd)&Kmr}Am&b2E46%j=;it@=^yZ)7LE+$Ys#WEjvDe~yCr{dM7p!|1*4%C=U zV;cjTRdlJ$MyA}AHi!0(&2OGyGX5a zwb*;nXawb3a4r}DR>##hQ1GeSjn5xu*AMnR;vVZi7+=yUj!s74`!Ti5)uAm`-?^l{ z-8td(+RXZt+_fLCU%%G4o;6#6{1d_N^Np<9@jY4guckV>&_A!8PeG}!#m&r=P`&Y4FVyS(<6V zx*0PPV{*tVPFFU{;MUNW2UOL5 zzh$x`^#E$0>E=-DkQH<~HhLV04q8cG2Pf_fyGA;`lx50usTrZd(C9^USaKsA;wO~P zyuzFYMZHG~XB*UNp}X22l7m_m@lI$^HUk3U9(05@51VaD%4~%|A2f_hFxX{yr&#DS_LQb3T}K&&iku zIxy-|B{9eApE1#Wt+Xnc>AlL(5ZJmMi5%{N|U zD3vucD~IF-*U4w01t(cWqK2rR7@&O$Q&;!bRC3^ima|8OPnu0i%gt`@`m1Y)IES5d z?um@7BA4Qs*5lV21bu>{`>PaFX*AWQ>>{2oBtH1ZOV6VY@ttO>5V{(lKt^;;P_E-a3+;1r~(zf2@3s1EQ?I4|Rv?x*ouRnn)4DZ&- zi$NtYr7H@Ci4CgTvO3~yv{oXS*UebunB}Qd%}YzMAJ+3p*x_r9uK_MoZ+}`KM;b!; zT6pTexGM77a7UBG*EaP;;w|$VYWxMA5JcGwRG;vl??lR60bJR8q7;64DCiDZg zt{T0$;d$y6xUOo-KK&1-FZ~(#@K(t!=!^1nP%V0qRJq&Z4Y}m=H@qOap)uOI0)Edhjca#IYIkzT( zYMTdkcY8IabIUG`xRAu`TZlJw=A7M~PYCLx2?;%lC`IN%_^g~X{fG!PZWpzO7bgkj zHkG*#eWM@ys|ObbBrJf>sD{G zq?HW4C#B{2{%1gu@5U*1!SIsh_iJek*EGZ+=aVnu-J|k?J=#?YV>=oy@CoSPCz4m@ z?1i5XjSX`~o!0nC_CKxi0s$xATr4q8@70S$0_xdofGrhk%Sv?U7#OpAa0sVVknigtvecR@3y6`;t@d#N0ylf55Ewu_Vr!$6#K{HQ+D^+4Zw-g)vby;h!q(f1l zGhVLuwxUOUGogzjTOZn=Ob6*(RTL|sj)s>8ci%U3)O@KhXoM9GHH?(RcSXULRXCdR z*cBmztY0*~Qk5o`TA;XyGoDISdc8Fu!f+j1zuZ{;@I6u;#igleP#PME^C8VR*+1XT zvtPa0p6Pm+_zY|Gm1Qi&r!dV20ji!@2gkTH8QB@3X7s2hMJ7rkIDg+mR$KF)Ccw>B z&8}t4bFn6##b;6xY1sA&h$fpun~SMit8opGo!~jR;0+| zZ@vGJELb{C=#<${PDfv8TsSqvp1)&03Ny?pm8Z#8dv-t9H^2KLMuog^**NCuA z0y;GcEfY@AdR~u(wb??wAL>;(K=!&9%`eIl^h48IKn*{0Yji1QGh1O6<8^y=+g`5c zd-&;wg0T{u8J0qw{izTcMlmhaaCKKE0juv9h1`OkS^Pxpdi|T7YVJ{ki|8fv#+wl@ z!|*Q0eIc)p`_x7Kq)X35q6E2365^>!GFroQO8qc>t&)Q<_z_kavh?O`y6=kshrzHj@M9E+`p)nYJ5n2j2C=ygKSHN z?oLW^v(H;R_m>Q-Oy>1I>D^oEJ=HKfGI(8`;JQ9N?1*oK;?)OVEHc}KU|DH7%Sk>RyZAWSahe6j32_-jzYBe61U6>T`{d-A>B);x^3 z(fZCB-(0F&gxz`1vDN(gho%lmiKnhsL}BwbuBk)2Nu#$SssafNj~-mAZl4g&aw(yY zz2nh^vdrj#y{J+zhIs@Ou6v_(GyeH}tQIS?T^((Ft(EO!u;X-tZ=JPl;jF^nr?;C0 zW2??HzSUaVkyo=|>>qG}N`Q8yA_&XHFJ>a>_uk)zkNqxbL5_#G7Yv+_;fayAj7%RF zqS_kNPfkPGt`ot8+1G|AZ4*G(@$h71eXu=2&Sx&|d&-)5*$9RvgvO$vlBVY$tQ6N( zc>Rlv+=u3k4+mJm*c)AhbTvAYTyCZdt%MFF(nis}wKZMsZXm?;Ndh~Q{$MYitglJE zQjIG0LA@Ubwz$Dle!gZwO*b1x9}Pj3hBFK)@I9Wx2k|KqP>-=Fm{;c(W7$=A|7t*A zc{+!8O;d(T4mQI!Pg#PC7-)1F!`Q(t_q+^<;W^Dx5R32%h&Y!jBN25^b17but0`4O zna}LfL-(}G#Rw>X1E%NJfsh;~jeij%L#2in86lgEqF}3MUG|!_RxTH+GkefTZ_+4O zy7GWWNL6!g(3Go`hy1j?x#@hGPQ4DprcVfK3l~nAgtYeEC>nc9kJ%PN3U^SMen3s- z+yV*SIU<;wv&^A;U6$U|9zJX-?x^)#AL%{hcsOI%*}i#m`}-ma6x)2(C8ZA;Hxjy= zOYV8{$pyT4_PSW`x_yjsKB!JQ@lc9F`^@Tii)eNA%6MkqSWr+n$Ke6p0>uq{PTkC$ zIr-M3QJOmBi-;L?jgtE4_8-?mfkm%|&2cMbMjoK?9+#5lSGYWdjED2SVgo!(?xMcZ z$@j9*KN{A>>&_Me2_^s1ZE(~++ZZB0^=duWS8tp=EcyJC`!BHz#fG8U-pc|}7FNbc z(e6N#%HN9Loy~Pj-Or+AKRbtg7wz-*`zm#=p%PiD%>DdazB0|qLvHirHhwwcXU%oJ z_*LbJy`Ai5`taBFcJ%0%RSu31^Y^Yr1NCoJ3)Lk$g8ff&JsN%$Uim*nA8IdLBHaQr znkQ-a9#hz1(3O3q@xd!APnGhRF_NvSqRr=#%_q703)|ezp*D%l<6|sR5tX+1ayaEs zPa=(o(2DotOq2bc@AtUQ2ANXsW1NBp`^ML{Et1E>#UBB}^m_dtetjMVBK>wzMT>p& zBIC$KE;B?;Wb&k~#Vq@>p#>`YjuH*{b>HwTOM&BY?$~|1d3egVZ8tT*Ys@`d(~u1e z?-^xZ=)YB91$^fKV4Us}BAgT1kHU+xrvrUo{;~S`p^3wJ^6>+J2jQE4BS89JsG|Li z$^HUhHesgAyh*VZqSa;=d#N1+l)XIHMX@qKLDyMB&h6*~RZ@jHU$c!1xMLCVm*7=p z!HQqB^zly>Xa@}Qc*Ca`v_Oz~47 zdlYESK?ma`xEA9OFRuL@+(?`U=`^$j$J6E$e?a>$z46xRNDGWSXPt<<^EttG?mNaB zSWIhX6?-@^)Sa7t2BPm2gesTW&4Xwfd8awaJG&iCcNR&6?E`&MeH!OV&Ngm}nOq}$ zLgQp7T;Z8@!&O~|UHgSg(_)T(JU)`$uLT}j=y3ZY4kXu3tu}-+cUCxzOM$stt7lJ! z9}m|aj5t0-dmscLbvB7dXM#(G7xHOkxBdK{GMUS~TP_13%ln@j+w^xR$3;RdYBcq3 zIV_|WIKmp|mTR?(iabBWMqPZJ!M8oGRGQcA)&N}lUy*muJ9rwI) zy|52|Fh3LHIS(k8Yz_4;+_DsO(+d|uG$!Ur&OlHfo3aQ>tI&C6`Ii*|ylQBgm7le> zm%Q;7j2oZ?CC2+ZFxL;yEy^mFGo&T?`|_gbR6ZNtn5cai`RvO##%DCzuq2SKlV>MY z&{wWI<(kN=S-3awCjp652H#eFqA~6h*pho2fO3e6la{-{vaq7U&y z*>i=4xD4wbz{e=X`jpwoVN(=Ya*m;Omie~r(%{zm$_vB6ri z09Y{o%FkXAX>hfwOlBC1+A_Imj5pfT zl1iVLb4}^XGnX^1N05(j=j0^pA#&#Y5>Wb~%k|kpg$JAZeA1*qZ7NH-&=fis1)7bb zl&d?NG*@`l27>hY%Su?aG!}a8v3*T~QhiVQ9mn5J5x>o!F6;!nK)R;1e2wF8Y)w1h ztbQ2y+S}a0Yx7lP-4X@bE{+uK6LfB?u(-{gw<|fc9<<3;Q8-A`O$AI-ag*W{gp3!( z-FTYU&3v&7r|}*9ttOR!aWj&ShJ2JN(@Hy0TT9zn^O_Km{OEI8bir<9EF{xZP7KZT zy0%+vE*$x%&s-s_{i{G^uJ=@ZLaRoN`$^C*KakV|nB&mJ(pLxa$C7z2_uk**S6dLU zenAKM^*n;*LWyj~CKp*J0GA?ofWEss5au7AF2>KtXRz3OJ$do`o*hJS%u) z)LSoEX*hf351uQnOlGma{V|Efc<#{l;giC|_Mj+?W5K2n-5yGR<>PxM%Tm{B--#V@ z?HUWPb!l;RU#EMmdj)D{w1b@@5=Dmm|(zZRZQpfnQ_f7q;cM#E$(%meOF7HLBD)!Bt%+Rb1}(Ii8`p#dbrF@aoY zZ~HUhfyOkm)6DZ79~s5+Mv;H`793ee^vVuNbKg*W&?Jib_BC0U?w)L|VH#b8HYp)j zXFu)t{LQnIFMYKJz0JO1T{W+oUtJ$J_+*VlOtL+u9aCJ(aWxYnD62>y-eV6@FN z@m0q<#&b4l`Q;Q|GP(1Rb(?;MS@0V zEYK;;K;xGRH!hQCg+w~uOeg}%_SrPRaNdgvZ2A-k=t<(a%!j9>#~&R`G_ab`C~-ge z|Bs0YCpt{E2{XE;oDtxLq9iMwAEtMGzzAcUNw?CZD!d__F5aF1 zZYqopB4j;6$a77L17idK924!1Eap4nD7r){=DoWWg9BUcBL*~aWKM|yU6kfOOYWye zQGQODk!J0 zj(r9t=i-zLC&f*hV(80X2_{m%Y%UCcNpOJQzb#D$O0JbUY#=v-MC$t$A7Qw(e1Dut2 zf(pZ6)`^3`j2}A`^wXaSpP$XRjBsImqxwG4Cwoc^LqyT!-Mu?P6ZOJ>6vDV+C98yt_W997%)Pwp^`c59(Eq~=67ZvL5hF@TC_ zj)edV8ONl?EYH`EI_d*$hf9krcF&rTuV(eH4P2J*Pf+2>hB$W*sZTVndGD1G=L_VL zi@XcHml4s<5XUJPF}q#u=+l%SE4DJRdt9H&H9tSa&xL-tqv+QO@x2 z7zoHUX?I=?v}&vwxM{&Uc*0A93cFtv_AAiRBuo=exOiLKh*xNtTG&pCkFSf{T)E7o zsK9?}%&fy*WQ+(`!{6JEzf2YKc$^@Zf7$J_9Mw-HIK$*rIlFJeSoY!F%HHbNXSu06 z^6y2cVk3UOANvgL&X?ru+V0no9B*{9U9%y$aj`EF*xGZ61*p=Lh-$!v_6q-5mfFl8 ziP`+*=aQ<=c1=}gB{JA5GA$g+LeVRgQ)qtMQ2EHwcsWJz7&+qm@lN$F!cXnkcDJ6# zST(|sW=asdMrpfh^w%7&>NNOy9k)!V3~yfb+_LR)okr1@X%U`0UiS@Ap-ZMQ3gX4% zKW%&^0WJ>PwJ7wCi*tPN?0xa&&&OV)0^~)rzEXRC>Pv$@0tkqKMI%U>QToCtiSIs> z^I$`{wVH-U^oyvr2!ras$SN>w_#6&W_NvPj8k&wxjpBc~|I^C^cJ!u+PSSFA zVX$?=mRpC#-5gdPk>}E&!-+?WwZF0W5w~1ykcK2v|2QFD@#O|8bG!hZ+L275(dBYW z%0_%3%%J7VH@{B4WFFxy=$+k5{CU0O<{Uq#quh7;k;QGEDn{MH|H$2kmm@sY^%sYV zTOqlygQp%=>M+XgY2k8#)H4;akXh5e=4mm2sLKcIw)A&Z9(&?{8I6bY+KbW)wOX`> zy!8>>DXNrt1MKzpiCxI<>c_+AKj36_<(wymwKt`L#1)ikILr#mlPN@=oWc7N{{+c)#Y^K4&- zoB5wSNgjF~e=SKjeyWNDPD`Rr`1b!8tlsUAV5WE7>J~z-UlFvp1@s<=Z)YJotz~f- z_ikq5!7r^mXeS3dxcoo0Qu7__aPQc?mDYEqgNf`WH{Tw}?S;VjWtv(QXwy6mCG>a7 z5M=gX)-DCNd1!_zM6D(o;V)qM3ksD~XjI8AX;p)>SGGh1cTin!ctFoz3@@{lhc^VX zk3pekEAd$X|KP~bBw(ItBpIT1VhzQ}e=vR*>Rvg7N*kM>3g(C-g|Ti9oi&!x2{i0j z*DBOjEc=7gJWCHsx3ge#el}-IzN(D*eNLy9cbDEoKL8b>C<@^__q@IwK0DtpFz(Bdo?^?8 z6@ONxlqIwO#>FZ4#m!2o=1Mn_U(cI2>vsWh8dqc$UW|h^ZL2bO8K($Zr_I+wMy%d4 zqy?qgsWA#Oe9F??{ZxiXf3{OV=J@+HYN%eHZBEq6kJ%iM2lLiNz17_*YLjg#`X#tz zm511A^2UTyTaN|m+Cb-8r7hrlO9Tq2hki9Zz+`(hd*#mUdY}352Cd*Qc#bTh`b>m(8h2GrivHyEt;x4{bTbS6*-3Dqloe?8hUrDa;XHI4H<|iZ& zjrAnS5BZ&v7b_@|FON4vj7AFYqz(kI`V>=qcgV-7$(aTFqnX(fN(sWAeu<>okKb;f zcK(=>*lz^r*VzM0s3U;^TzkLUS`ca|4XHndvUr!1ggL)^q%J{I{OnHBRUTpC#`;-B|JfEJT;0E>>>PG43zl~)Tr{(nr2etuV*(A5rw<85_A=&Ub+#x=I$l9rFm((v+Idd_FS<`R*r|tqNJWc-oc# z0_B>yV>3SXvd-(=e%Pl@x0JqLT;T#_HnaXmqC3tad} zV#gLXXG$3F=C3-dzlZXgdFKxXXw98HbC+2*PC=3 z!NGa*2`yvn9Q{y|FnJWHieMP4{v?1CiPe!h)|2lSq!{7h1E(EeQJ#&V<-!Bvpd9-L zQtuWV@5qb9^{e2kc?^A5Asq`PUM`h_|53(&{SrS{Bv*Rf z4cT;QmHCH%S^=fepx_(3 zq=oJYst3h%oi@B9i4d9->b%h6K2os<0BF!tL@;#n$Zd@|#aW}K-9d$J&t~hJ^-`}0 zcN~^owzIyeY&;v@L%UW>t;p|t$zGe~+gir@G%qk_MNMKj55cRFE+sDFx%cqPl>T_6mO)bXlY2h#I`k35dEynTm! z0QFCM$N2}#pK<^kR1!{))jgMlnX*pdf8N}q_i8(^O=d7-%<5Uj<+Ir#c+4Bj1~N2+ z&K7A*onrL)NrM%}x1SK%55+}}z@HRdo{vr0=nXOl4xWdb*#H2M{f>@pn&&C%A2n5A z4|UMH1^&JHkL6%%qHt42!xyN0NL4wv)Uz#k1vfaRnrEOY{@_BIRe$R!>9^SM>0lZ1 zOM%h+Hjq6W>zL`_TV!ucE)m=beGs!u@^R8jiR*L{g#th-jd;Pk!YMyx?~jh{ zZ9<$MT+BSW4k}6|=G6Ql9PL28MnbGt&1Zm$d1bsE_k9CST=BdGDU`A8!f)_M`6AN@ z_PY51V($rU1OUbam>x~<5!`p~r`9{y4dqr~^e!F9fXs+Ei z@nQa`HoNNEr(;Wk3zDl^rcE&O`M2?X(8*3w+ylaYIu(w!ENhXyTE``+;-?Ooyd)#R z;N9nX9*S819h+;N#mxyuoGFtiXquAeLe}W@3PWO^Tjk9I0IA;Q^Pv}o@^Lq3Q}Ga} z>LUn7H?@s(|99Btobenjzstiq%{mgX%a#emE`>Xg zJk^o|1k`~kq!qTveOw^RdV4+P0kAK8SM9^>Q~~@xeQr&;s%-QierjYCDBGY`nM-2O z#E%nb>-i`J7eV^$(|iUd8LTaLcn_m!H|ZI+!AEoF+{N5|{k2*3k+f=2`6Dv=KY>Wk3TYY=2Qo`A-6_?tqFp*m%fz>8R1A3Tk()(NDo8 z5Zn-)yuG)TJWo*By98@M9#s&b@oXd_tx)&^Jv_ap6a5A9Bj=RMX_~I9NwzNmeKD}E z9o2VnCAFW+-9meUYC%FBx!VN9xRP!IwI3(5L3?$!zb|_%7Qk4!-9$ zv;J78Pi-LOhsy>wX%A$>5XsvrCkhg^6=s&f&u%>TV~4A3DnmeJuQ+LHiStObFkZGT zjCTRAF9hn%Ks6xb9orRo6ac{V<@Oqj{DQNE<)44)C%+8;ZuIbQmj*Q7!O1ZI_rLwV z)8aH2z@Ny-sPWHMyWa=zNO`UN6KP|j4ZpXJOUP@%lnn%G(~H!K=n;!=Da&W6LH9Zs!*e_p;4ij7$z;c>-jVy_20H*o&a zFI~1=5vDE1jPgNkSnv~>;SqyR)W-3;v0%c8U{GHN>?d;9+J||u{>W|Jup{rCdaMBt zIHKiX^@VS>mlj{48Pn2r|skHT-!wHBbHEeFe<^_!Wra96dm zre{bV+3xv-SK2`iDf=8pbxwG3zZUoG>nabd8)u1Wtpn%a_Eus7>qU!EERXp(aI2{$ z$B`Nx(G?l{G&t~AmkFZVH zYp;i^r6qJ;FmQ&1ollvYNvNWx2-)TJ)#e`xfINdKM)F{j4_m6fxEhP|^2+)xTa5=* zCS2YUP#wb1;~K);EMRtsX7>wIDwkG{o?PQbi1UJ2J2`2%G7hHFqyDZ08lu+1M7THO zy94$&*c6O;7`OT#;OpUkKs6d>ux(hwJ!g{tj%SlmrWH)!yngeDe>(ZgU*hm=oI_}W zsRLJfn=*!%E7I355``FlBZ;Fng~EaAcdSPR|KbVV*{Eq`9{BqA*{>lQsO3=J z-(|vj-fL=_F^iu{y2fCYjn?C}0> zw;+{8+54{8@%j?|NzyE1L%zQhPpznZ2^R~OPZs*-?6%~r{c81nax(&gSy&lx4^LR=UX$G}!7_HYX%|1l=_Tr6{^1R3 zp&}~6IrZrP+$h-mMYTm^s#;4u)XIl0dJ@TSu0)T^Z#H7pkA+z9#Qi1d*(6oFS(xar zBi5L7&T79Qze~#%d6OVY3&2=OpWtpTZZN?2=Em6wK z069GF+!(A?MssMIQvzNmF4lXgCqtHwSiSfUw3TzlaVhF4m5pTbGPvrauDjPq-=w^X#rD9lb(Ffdq)|KLMz~?o651tF!5V zTGgAjq%koe<3H3VdS%|nYpiPU|0M~7sS~0Mu{z@7WgR@A7x@d0oWYAV1YR7tj7|N= zV9*yozd&xV<5#3|nK(N72U7yAu4@JAt-(tgh0Nc$pcaKs5+SMo=hQj@quL?XT*y0t zL!b%dA%KcAfjco>aF-@9=ukd@nFU+~nJ}YAHWsOZ{CSe54ESD7bfdHQ7^4yPk43Ff zD0KvsAdH808f@3DX@NZcr7jWZknF=_C{%&i@nW+FVQU=H`s8*V8UTiM?{jiL1NSy4 z-H+`MER#wn$42L}Ww)E=rs5^9n4y-w;3TNW8fRLrh(}v*2pi<~!1Ce-UhdzcCdbIP z@wTTyAq(WK-C#ENQ{}s3jru1l6G|5=JEFb_*9f|J9HS&A0lo*`g*jk(n;M4o!+&Zf zwBu_Qk-yI<+$6c8EifL?LIc5E3wCM4JofdFJ z$$2TFERU3;dp>c(OUznndmSHkzdEae4f_d-m|bD-$6!YQ1Fpo|V_>>lEJQ0};E&kR%UgL^rPzoq3i#w}Voaq{vC%-6RM}|G_VC83S?dCmqi&;^BhJb_{kqC$P8Aa!@|KaP zZ8-g^K42q;;rzFu=c+H%>Z1=2=Y1jMIIDY4WT<^EcMXOL2Ys&#?LCGxOii5bsgVAQ z(dAmzA{;nd?&LlGf3ed42EK`YJNU-bPk$$VTJG+-2d2qLaQzF^ayo zh@JL*+_dX!hBXjwrDQ2YeH}5uOyg>@;=0m7>+!s2@^$@qeKH2u4*E26Q;SFhz0S+_1 zqmm>buh>odYBHd|@u3fUY6A2D3 zG~Ig|E!;KX&%mPgwavUwz_7l^>07A^TyC_q0fqpIlM526ptgnIa5Nd1Z4AmR`ME*v z3d-gA$=bV;36x*0N(;~Q|KmfF70c5A? zSNN_u1`kfLC4e3l*1=U^Gd@<3-qHXPOa5plbO%43ppfW%kyxsNLQ?$ji~+&-!+1q; zoFW}Q8gcs$jqN@~^)x}uulD0z1uK0EjtEuQGgo3kx0mQK9&{B-T#1GaOr3~S;;B*Z z3=?pO((rspp5*h^S%o6AOa=7{!`Y?Y=iJR{WC?i9wsN#9f_!E4@u+9G!BT z9m<;5yq{P=h?`rX65wbDM_tBGREgo!bP^DCM-2AZ@16#ywpS&D&!It+^ z%a{g7Z=_ClI9eF}w2RT_$}bW+^oyp4^OHcp@!fnU<~%^uOmJQ*+*~h;YzWTq0 z!vBXu=l_!kc~}ay`H6=iq4}|!Xmddf#Up_}3Q!HVjCkhct8|%~Z7LG?>wpPWK_+EA zilf>=0h+qxAbPiCIBMlBJjfo0*;)}9h33pY>SJ#Jl)b}k$9EeY@S-(MukSS(zaxM~ zgsc8YX0>Sn|0l#`w9Oc7x(Xas@Aw1lYcVq7jOKJqm)>Z{#M(ewU8R=iUe>w|wCV_f zd`!N!(EzI1E0VNpZxcmzOabbm#;cm9G?%gMw-@ltUkSTTiB5(YA8zGe8!r5Eb`C2G zeWW8`0g{*JTW*x)E(`Lhk!!OcAAV|Lbej62RqV(>#qtdpS9KXMN%mM)%?O;052S7+ z^B&T5N!IcFFcC0?XL89l-_nQ-wDa0!-1A>$4dxbf6_5IGwC1}7! z{3#+)0r}XJ_8Z}NqcRkc!cWK`E8oKD#6^2zr^XjGE88|p3 z!vE64GF7W2pGF)YYZD~VTi$Y!GoTibQ5YsagwKDJbon5#4ysH&(G!5ueagJONI5UO@r7irfe?wJ;K`?kEcq{p)lfO1?(*CU`3vq?d5* zXD2_EL$(dL1z;+hN^SMXEG&cR@>A1&$LJ!*KNa@ZQ7_-9;*oHWkzS$Vr>8KQ`Tnz| zH`>sqsXQL9OiykELuuMmJ zBKx++ZZA$`_m^K1+5`yh*Hb#29clp_FecyIx4s-)?r53Ux;J%Qnie^#7hGfQ-UYBI==-*be4|QH6Lf$ODzH9l$ zY<9`HSR6;mQ-1b@68cRbQudFeu%3Z)@~yCu#k4=aOk&riu3C<|yn|1ouiCi!x+09i z4OFvGB!CWFFU*!hsLRlo3YkwQqsJCZia0{f>?cn0vl-XCgu+?Y)Aihepru|gZ z>dRaA!TYvxKQaP?0zB_j(=gZ&M zTSsfM12AtvD2e+e|RPX**&leJHnMhJj09ner z2C5io9hmuer@BDY7~dB?u7|d23ys;+MLbhWuWsSK_+InO4m`{hkxT)iPs@uj#J3no zO!u%zZBZB67P*15EyVNbGAa{HgJ-sjK-zq4Rmx|7JyDXr=xi17n4!fT;sB7U{hQyw z>|Ge7qbqs$v+TKjZbpOT_yD|rl%ae%>Q-`?5b&pzpO4uEbMqG6K)(&dhh7t=+} zKJMS-8UmoXN5|Or(^F~XiB~kb6aq?Kh1M^IpywT311u-Gnl%P7yao63SG?C@BzEoT zaOUZK21k&C+;+-`I=L@GDnI0MrF>lK)_>lmhsW2w;kGIKs*EU?=w<-L%~}AYa+(T# zG|6XcsgR<&F?sgc`QluewwJd~%+dhw|DYnF`+&;qRV`qVlWL3n=v7UperwUI@C_FJ zK@zGEj}!$gn)1~YB13~`=Ff^-u+Q$t7F5+%!M1zItEU(f{lE%|xARjzl9Kp$FSwf& zIXqvHv=S4HG^E7RQ1#i9EXe+;RbUT1lms3YL+%>`#WP6%1)`ubqVwF748XKUrxQ8V zzFF6SpCSO@=Yf~BNqO6!$idp!PJlb+*M##m6aWv!^sm@e~h^mABW)Fx%Kin<0EE( zjE`|F-pENE{bZun^>JDBRgcjjN?z18EFbbC@^{{oM%*)c;;eRwRa{235j~XkT3PCo z6!w(H?QIcBF0h*Y#UT~%eU~)s+8q$1!ley|3#>7Uz^nC7{prOGZUyx-89dajJ`~m> zFYM#Vur^3Xq)Ry{)-f_W(Z6eGdJ%u1wl*LZQ#|T9gh;|h56}j}6%6GMzKx2ijJCll zyj(rZpGCWk-^Hqow8f*{-^^*bnav|?%%QJ=Md1H*S5TFKIcnwy1oQ z*g+{=f9~`$%0t?r`BQOGwr^*2fZb;4v?Ql@qRF6KVX%43PsX^c2D9;Fgo?d)N(X&h zsY+iROEEYg1;Vj~-&;s``{f0*UrL2+h%n_Z+tg=DtA@|bvZo=Fn(l$)iq)0N9zR#< zvdQg>P-j)b(7Jh`j42<}bUm*RMDeb?U-E{>mrqg}TBs|iHenkd?l#0%*74~9iry@U z#@PL7RkT-+$APZ(a;lRl-)k*#pIW?tJbU#1@AELM)`(}l=DSq2w>|=2jaVOz`ucLD z@JtKY4An*0!-|~fQ6i2i9swyN;qVeN6`d5{dbNoHTLwIvx&Of3`%3-MjG_qNR#xT+ zs<}gzwJ@nBR@I0+#!YP0(gR4bGl*DX((@>$E$CbRafB zevyh0>H+9QhHvDk(4oPa_rqEDfZm&QsPs6-YMNn~XVRtvm4po~n+xjY)SBxD2dU)A z#RgV`UQ)UoO(? z34550GQu{xn$PTeel4twmKrb#Uk68FwGz!FH`jjtN*iwkY@IebBE!E<+!Yw?Xe3N{ z>m{rorYD*ajEcVb4_~C2HUfi)-2;D5s(Ej{#AN32h+!o)g{~Ax8W%lh&2&q&ee7o* z{v`~;lYm;4###!smEoS5I0y90-8GgZS$nF*a^s-FT^l zSo^J{UeOYYpG|0eT_dehey2Nc;xqJYe}o%M=wECLzxoQ{(SW&4zJymeMtA@#e-|}1 zYeD;Q?Dq5Ie&^m8LmAiVbF@iTs*cELw1eKFI#;GgC_Xqr6lyf3`w8G|z3pRSrsVx? zrL~qSg`QI8lPhX}FQKIcs?nbJUgrhLnyY1I+B7xAq7RC5nzZ@0Fk*G>nm3gm?K-RU zL9$}sETvM5@fudd z#Dj{SCv$rB;LZ>jF<^jmo_*Zb&I@aoZU!jYORL-L{cS^f>HA53Uei($u3sgo* z^5pQx!M%T18sfhM%|}ZRoS=aJV&>67hkDr^&S3G_wlnsoE0J)4GD%d4q32qAjl96F z^OKNd^NF=WoJd7fG-DF!MdIkco@UYuvPr0tPfyjl6mXJ|NHIX1QPJ0WfjS52Vt8Y6 z7$rkYhAMHum7HW@Cf`X#b0`V1z7DlTi4fyaUHbuE4lB2S)K%yx0w6&EYB&;-NGA=H z$hB@-jx_2H>j5cdqe;0o{3ai6DMoPl1W62eGc!LwB;3X7)$c(w;+XL7en~pmv{OvvEcu{&ruqU z9#0pxy=#hqy!1AFha7OJpAQZ4<_Z~*qXOpdx)u-k>|~ef1>ARg>dAW>gizyE^$(Km z=KhP}PtAbs;tFsx?mExj;p|zT!2S4vS&3b|ri1-r} z9gyr$Z%KD@+K-<1K>q`;04r}D4k@M;s3r9N*&f6gB$^M%esbC;=WeA!C%j(7hwf8( zZjOD`KlM8H_nS}q`a7`Xa?eQ;J>ZKSvLN|_k)@Rf^dPp*&=Pz0v?UB0URqhQa)P9C z)VB=Y4|ly-e=k>!Z8)FzqO`k;IdDAbscNR`Yx`}y0KyPit) zTonlLn9gV_zU<=6XU0{m2!j4ARdRIX8J!@1?4=1(;y zQWoM-C{D5p+tYHQkZhhSv6ieZJtwnQGy^~X5`0#r*gd9`)png^`1WOUS)hJ<#nxqp z-1;i9YS_-97irC5el{n5A-q*PcryiD@V#iXnfK0x9%0@{ zF_GNiq_~$juUMl-Kx{|y&mV@%;aB&U&rb-1w;1_-Em{^5D?4B*znP$9ZyRkB_1Mk5 z%tDWTb{!}ZWI!a<7s<%Y)GdY(eyU12i6yL>AR7#NzVJyOM@Z|!_L^6n^ki{h)x`N~ zJm=GX_^|D?ASb!V=M~w^Nl74bk%l?a-hodn=0a6N8<)NW6LD7#5*&84Zz{tl6``J% zLM$_<`{*yrxa^nkzAc8(?0G8E#W^r=4^A3NMn;ep-2ROy6Svn5h?5R9nib+IgSdh~ZG<~-0AD5EDOgG~G zh3tm`LQF>UGW2YKOazC!;@PM9A=O1T0LR6+C(laS#qj z$}HH!5|=hE z=%!bO*gh%-73jcRWjV>T#n*OFss}%!UcaM|BVvyg8Zl@p`|?1mH?_5H#H0OI&-SH+ zl_(!>yIHl~r*YpiYv_jtHc5-kZ*IVMvy&`+LU`*1 zsCi8CVTCzNN&G_eoy#i6Etq06HuQdO4qL4Agz?dt^0rwm$vQ_IQB~f1rXqWXgNIv= z726&_wt@_qoQ)u2s!n>fG%5S$D;1gK8iM^dSys+<$dEU)k50&z6@$KCd>0|?DtNCN z2#z)f6Lq-CiOW@3L;lKY3P;7YF4=tgOi{UEgx&q@HNn&G+bFgdmav>) zsc`qGj4=G&lZ(3j*U<5LGto@`$!5Z}bwT{h>5?_hzN=)g<)A#{DS{*-WA69-RmJBM zy99xN)pn~M)CweGn$WH|&%@9^$4NtUN19CpKHmx6PF^5eMjF8T7r&|O=2BioTCDqh zEjxj3^p{zTH?6?$CA4-SVel)zKx&kK=3?GWiU&I9q3>=8ALo#RJ|RrZ2UC~(H;jDg zlwj>AIKWMS>?L!oZ}@ADO)6ODPU!FTZ<8ULJ$R?o(CNXUF!X$)sH-bPOlf;9@F<7i zRzxVD*;P0dnQT4V+x-0>G{&e9e5E$`ThQ)I+oZ-;~b{8N? zr`|IQCSa#uCk*}tSj=ayqG9y;#ZxhW7@d*Xo%4$JtVP7PjRq2u zH#-X*2cLOVSLc~S%CBjXoA5g@Ur541ByYW9iWxv&5=D;M`}4whDTUXANgfq0Vfk0>balYGa- zF>?PP?~};}TbM9@S4x`)0RfpE1bSZuTrhLKAnFQ@VbO;m{pyUq(9F{o9zAB!PoUs{ zOSs0Jy5iAgYU)iGMEpMB-n?Z|F1rcrZIT(F&O$FrM@Jb7c<%iR3%do#OtSxp{v=hR z!bcFUX_dElotH4=;uRv@PVlH9OwZX={qAr|&&_(b`Blv_!wDh^<;^=Q(P!3`4hSjY z@zJuKGjhmn2+dFOW9Kcg2q{8An}0enqm9-Okd5o{Y-zZT+aZ1JE7a95N#o?Zky!1_0=k7yftj**(>P9be;oqa;giiq8+l|i8a2gvzh8S$DZ!>;*^zSacO0hdB@g(KOf34& z6nca5n}?4vM)y$WE^omcFbRuhHpOTBf|MyG`j#6KlDUJ&xCSarTg}--syip!V&ijQ zK-W>s4jMk`aXU9=Uox|G{W>j@dC~RD$t#Q^E)Z)l!{EV46Oufo$*#**gzv?$#7P&_ zp7rin8Z|{4x{Z}p*-%$lt4e;xAwILr93OoamKCac1vIC+_Cbl2`FOL;q4DdWJ@6F- zBaW{0_~9Lf5Z8#>-_GmssV_#B9qW4oZ=gBw{37Aph5>D1ln$MT+NO374SRF@Q8lh` zq+45-0a)-27l+(`QZ|jgd}?VEIa8zg;8lyHWXT=1HXHmHRO-8lG7`o!=Zp8RtB&X7 z4Pb6u_yx~l-piGgRLl0iFwJ7WD&!5kgAZhtkO<*)f)B0D2I~S%jjV@8Rc*Z4m!1f* zj~Hl^Xdggls@%~boYmZuJb`ZSDpVzYkT%TNXP%l2iapDuwx1& zM<(FGE#Phvp&AHkWR(^avN+b0{8AU78Yil3jWFcq_C&)J@&vO97=2n=fURnWJBS&& za)vL11BEgT7}{0={6vze*xZy~p z!WrDsc4{{L-|q=Y@6db)jzK)?fR_U=TmhL?`(O4p`P@{l-7}g#0{9^g=ek6mBdiBr di>?sKy7EXktF7X_fvAr}T}4~D@|o4U{|5e-^*jIo diff --git a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md index 14398b7265..864eabc8f7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md +++ b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-scenarios.md @@ -50,51 +50,6 @@ Ensure that your machines: - Have at least one security recommendation that can be viewed in the machine page - Are tagged or marked as co-managed -## Reduce your threat and vulnerability exposure - -Threat & Vulnerability Management introduces a new exposure score metric, which visually represents how exposed your machines are to imminent threats. - -The exposure score is continuously calculated on each device in the organization and influenced by the following factors: - -- Weaknesses, such as vulnerabilities discovered on the device -- External and internal threats such as public exploit code and security alerts -- Likelihood of the device to get breached given its current security posture -- Value of the device to the organization given its role and content - -The exposure score is broken down into the following levels: - -- 0–29: low exposure score -- 30–69: medium exposure score -- 70–100: high exposure score - -You can remediate the issues based on prioritized security recommendations to reduce the exposure score. Each software has weaknesses that are transformed into recommendations and prioritized based on risk to the organization. - -To lower down your threat and vulnerability exposure: - -1. Review the **Top security recommendations** from your **Threat & Vulnerability Management dashboard**, and select the first item on the list. The **Security recommendation** page opens. - - There are two types of recommendations: - - - *Security update* which refers to recommendations that require a package installation - - *Configuration change* which refers to recommendations that require a registry or GPO modification - - Always prioritize recommendations that are associated with ongoing threats: - - - ![Threat insight](images/tvm_bug_icon.png) Threat insight icon - - ![Possible active alert](images/tvm_alert_icon.png) Active alert icon - - >![Top security recommendations](images/tvm_security_recommendations.png) - -2. The **Security recommendations** page shows the list of items to remediate. Select the security recommendation that you need to investigate. When you select a recommendation from the list, a fly-out panel will display a description of what you need to remediate, number of vulnerabilities, associated exploits in machines, number of exposed machines and their machine names, business impact, and a list of CVEs. Click **Open software page** option from the flyout panel. ![Details in security recommendations page](images/tvm_security_recommendations_page.png) - -3. Click **Installed machines** and select the affected machine from the list to open the flyout panel with the relevant machine details, exposure and risk levels, alert and incident activities. ![Details in software page ](images/tvm_software_page_details.png) - -4. Click **Open machine page** to connect to the machine and apply the selected recommendation. See [Investigate machines in the Microsoft Defender ATP Machines list](investigate-machines.md) for details. ![Details in machine page](images/tvm_machine_page_details.png) - -5. Allow a few hours for the changes to propagate in the system. - -6. Review the machine **Security recommendation** tab again. The recommendation you've chosen to remediate is removed from the security recommendation list, and the exposure score decreases. - ## Improve your security configuration >[!NOTE] @@ -104,8 +59,6 @@ You can improve your security configuration when you remediate issues from the s 1. From the Configuration score widget, select **Security controls**. The **Security recommendations** page opens and shows the list of issues related to security controls. - >![Configuration score widget](images/tvm_config_score.png) - 2. Select the first item on the list. The flyout panel will open with a description of the security controls issue, a short description of the potential risk, insights, configuration ID, exposed machines, and business impact. Click **Remediation options**. ![Security controls related security recommendations](images/tvm_security_controls.png) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score.md index 6785da1317..f245ad4692 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score.md @@ -30,14 +30,46 @@ The card gives you a high-level view of your exposure score trend over time. Any ## How it works -Several factors affect your organization exposure score: +Threat & Vulnerability Management introduces a new exposure score metric, which visually represents how exposed your machines are to imminent threats. -- Weakness discovered on the device -- Likelihood of a device getting breached -- Value of the device to the organization -- Relevant alert discovered on the device +The exposure score is continuously calculated on each device in the organization and influenced by the following factors: + +- Weaknesses, such as vulnerabilities discovered on the device +- External and internal threats such as public exploit code and security alerts +- Likelihood of the device to get breached given its current security posture +- Value of the device to the organization given its role and content + +The exposure score is broken down into the following levels: + +- 0–29: low exposure score +- 30–69: medium exposure score +- 70–100: high exposure score + +You can remediate the issues based on prioritized [security recommendations](tvm-security-recommendation.md) to reduce the exposure score. Each software has weaknesses that are transformed into recommendations and prioritized based on risk to the organization. + +## Reduce your threat and vulnerability exposure + +To lower your threat and vulnerability exposure, follow these steps. + +1. Review the **Top security recommendations** from your [**Threat & Vulnerability Management dashboard**](tvm-dashboard-insights.md) , and select the first item on the list. The **Security recommendation** page opens. + + Always prioritize recommendations that are associated with ongoing threats: + + - ![Threat insight](images/tvm_bug_icon.png) Threat insight icon + - ![Possible active alert](images/tvm_alert_icon.png) Active alert icon + + ![Screenshot of security recommendations page](images/top-security-recommendations350.png) + +2. The **Security recommendations** page shows the list of items to remediate. Select the security recommendation that you need to investigate. When you select a recommendation from the list, a fly-out panel will display a description of what you need to remediate, number of vulnerabilities, associated exploits in machines, number of exposed machines and their machine names, business impact, and a list of CVEs. Click **Open software page** option from the flyout panel. ![Details in security recommendations page](images/tvm_security_recommendations_page.png) + +3. Select **Installed machines** and then the affected machine from the list. A flyout panel will open with the relevant machine details, exposure and risk levels, alert and incident activities. ![Details in software page ](images/tvm_software_page_details.png) + +4. Click **Open machine page** to connect to the machine and apply the selected recommendation. See [Investigate machines in the Microsoft Defender ATP Machines list](investigate-machines.md) for details. ![Details in machine page](images/tvm_machine_page_details.png) + +5. Allow a few hours for the changes to propagate in the system. + +6. Review the machine **Security recommendation** tab again. The recommendation you've chosen to remediate is removed from the security recommendation list, and the exposure score decreases. -Reduce the exposure score by addressing what needs to be remediated based on the prioritized security recommendations. See [Security recommendations](tvm-security-recommendation.md) for details. ## Related topics @@ -50,8 +82,9 @@ Reduce the exposure score by addressing what needs to be remediated based on the - [Software inventory](tvm-software-inventory.md) - [Weaknesses](tvm-weaknesses.md) - [Scenarios](threat-and-vuln-mgt-scenarios.md) -- [Configure data access for Threat & Vulnerability Management roles](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/user-roles#create-roles-and-assign-the-role-to-an-azure-active-directory-group) -- [Score APIs](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/score) -- [Software APIs](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/software) -- [Vulnerability APIs](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/vulnerability) -- [Recommendation APIs](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/vulnerability) +- [Configure data access for Threat & Vulnerability Management roles](user-roles.md#create-roles-and-assign-the-role-to-an-azure-active-directory-group) +- [Recommendation APIs](vulnerability.md) +- [Machine APIs](machine.md) +- [Score APIs](score.md) +- [Software APIs](software.md) +- [Vulnerability APIs](vulnerability.md)