From fd005825cf319449cbaf87736a66d65fe0b6af14 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Tue, 21 Mar 2017 02:01:17 -0700 Subject: [PATCH] update alert mapping topic --- ...l-mapping-windows-defender-advanced-threat-protection.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/keep-secure/api-portal-mapping-windows-defender-advanced-threat-protection.md b/windows/keep-secure/api-portal-mapping-windows-defender-advanced-threat-protection.md index 27d573a327..e242add755 100644 --- a/windows/keep-secure/api-portal-mapping-windows-defender-advanced-threat-protection.md +++ b/windows/keep-secure/api-portal-mapping-windows-defender-advanced-threat-protection.md @@ -21,11 +21,11 @@ localizationpriority: high - Windows 10 Pro Education - Windows Defender Advanced Threat Protection (Windows Defender ATP) -Understand how the SIEM schema maps to the values in the Windows Defender ATP portal. +Understand what data fields are exposed as part of the alerts API and how they map to the Windows Defender ATP portal. -Field numbers match the numbers in the images. -# SIEM fields and portal mapping +# Alert API fields and portal mapping +Field numbers match the numbers in the images below. Portal label | SIEM field name | Description :---|:---|:---