Merge pull request #247001 from danielledennis/main

Screenshot updates + IANA ID filter edit

Author: denrea

articles/external-attack-surface-management/data-connections.md

@@ -50,7 +50,7 @@ This section presents general information on configuration.
 ### Access data connections
 On the leftmost pane in your Defender EASM resource pane, under **Manage**, select **Data Connections**. This page displays the data connectors for both Log Analytics and Azure Data Explorer. It lists any current connections and provides the option to add, edit, or remove connections.
 
-![Screenshot that shows the Data connections page.](media/data-connections/data-connector-1a.png)
+![Screenshot that shows the Data connections page.](media/data-connections/data-connector-1.png)
 
 ### Connection prerequisites
 To successfully create a data connection, you must first ensure that you've completed the required steps to grant Defender EASM permission to the tool of your choice. This process enables the application to ingest your exported data. It also provides the authentication credentials needed to configure the connection.

articles/external-attack-surface-management/discovering-your-attack-surface.md

@@ -58,7 +58,6 @@ Custom discoveries are organized into Discovery Groups. They're independent seed
 
     ![Screenshot of pre-baked attack surface selection page, then output in seed list](media/Tutorial-6.png)
 
-    ![Screenshot of pre-baked attack surface selection page,](media/Tutorial-7.png)
 
     Alternatively, users can manually input their seeds. Defender EASM accepts domains, IP blocks, hosts, email contacts, ASNs, and WhoIs organizations as seed values. You can also specify entities to exclude from asset discovery to ensure they aren't added to your inventory if detected. For example, this is useful for organizations that have subsidiaries that will likely be connected to their central infrastructure, but don't belong to your organization.
 

articles/external-attack-surface-management/domain-asset-filters.md

@@ -30,8 +30,7 @@ The following filters require that the user manually enters the value with which
 
 |       Filter name                  |     Description                                                                              |     Value format example                                                                           |     Applicable operators                                                                                                                                                                                                                            |
 |------------------------------------|----------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
-|     Domain Status                  |   Any detected domain configurations.                                                        |   clientDeleteProhibited, clientRenewProhibited, clientTransferProhibited, clientUpdateProhibited  |   `Equals` `Not Equals` `Starts with` `Does not start with` `In` `Not In` `Starts with in` `Does not start with in` `Contains` `Does Not Contain` `Contains In` `Does Not Contain In` `Empty` `Not Empty`                                 |
-|     IANA ID                        |   The allocated unique ID for a domain, IP or AS seen within WhoIs, IANA and ICANN records.  |   1005                                                                                             |                                                                                                                                                                                                                                                     |
+|     Domain Status                  |   Any detected domain configurations.                                                        |   clientDeleteProhibited, clientRenewProhibited, clientTransferProhibited, clientUpdateProhibited  |   `Equals` `Not Equals` `Starts with` `Does not start with` `In` `Not In` `Starts with in` `Does not start with in` `Contains` `Does Not Contain` `Contains In` `Does Not Contain In` `Empty` `Not Empty`                                 |                                                                                                                                                                                                                                               |
 |     Domain                         |   The domain name of the desired asset(s).                                                   |   Must align with the standard format of domains in inventory:  “domain.tld”                       |   `Equals` `Not Equals` `Starts with` `Does not start with` `Matches` `Does not match` `In` `Not In` `Starts with in` `Does not start with in` `Matches in` `Does not match in` `Contains` `Does Not Contain` `Contains In` `Does Not Contain In` `Empty` `Not Empty`  |
 |     Name Server                    |   Any name servers connected to the domain.                                                  |   dns.domain.com                                                                                   |                                                                                                                                                                                                                                                     |
 |     Registrar                      |   The name of the registrar within the WhoIs record.                                         |   GODADDY.COM, INC.                                                                                |                                                                                                                                                                                                                                                     |
@@ -44,7 +43,8 @@ The following filters require that the user manually enters the value with which
 |     Whois Registrant Organization  |   An organization associated with the listed registrant.                                     |   Contoso Ltd.                                                                                     |                                                                                                                                                                                                                                                     |
 |     Whois Technical Email          |   The email address of the listed technical contact.                                         |   [email protected]                                                                                  |                                                                                                                                                                                                                                                     |
 |     Whois Technical Name           |   The name of the listed technical contact.                                                  |   John Smith                                                                                       |                                                                                                                                                                                                                                                     |
-|     Whois Technical Organization   |   The organization associated to the listed technical contact.                               |   Contoso Ltd.                                                                                     |                                                                                                                                                                                                                                                     |
+|     Whois Technical Organization   |   The organization associated to the listed technical contact.                               |   Contoso Ltd.                                                                                     |     
+|     IANA ID                        |   The allocated unique ID for a domain, IP or AS seen within WhoIs, IANA and ICANN records.  |   1005                                                                                             |    `Equals` `Not Equals` `In` `Not In` `Empty` `Not Empty`    |
 
 
 ## Next steps 

articles/external-attack-surface-management/host-asset-filters.md

@@ -39,6 +39,7 @@ The following filters require that the user manually enters the value with which
 |     Port State                      |   Indicates the status of the observed port.                                                                                                                                                             |   Open, Filtered                                                                           |   `Equals` `In`                                                                                                                                                                                                                                                |
 |     Port                            |   Any ports detected on the asset.                                                                                                                                                                       |   443, 80                                                                                          |   `Equals` `Not Equals` `In` `Not In`                                                                                                                                                                                                                            |
 |     ASN                             |   Autonomous System Number is a network identification for transporting data on the Internet between Internet routers. An ASN is associated to any public IP blocks tied to it where hosts are located.  |   12345                                                                                            |   `Equals` `Not Equals` `In` `Not In` `Empty` `Not Empty`                                                                                                                                                                                                          |
+|     IANA ID                         |   The allocated unique ID for a domain, IP or AS seen within WhoIs, IANA and ICANN records.                                                                                                              |   1005                                                                                             |                                                                                                                                                                                                                                                             |
 |     Affected CVSS Score             |   Searches for assets with a CVE that matches a specific numerical score or range of scores.                                                                                                             |   Numerical (1-10), supports decimal values (e.g. 8.6).                                                                                  |   `Equals` `Not Equals` `In` `Not In` `Greater Than or Equal To` `Less Than or Equal To` `Between` `Empty` `Not Empty`                                                                                                                                                |
 |     Affected CVSS v3 Score          |   Searches for assets with a CVE v3 that matches a specific numerical score or range of scores.                                                                                                          |   Numerical (1-10), supports decimal values (e.g. 8.6).                                                                                 |                                                                                                                                                                                                                                                             |
 |     Attribute Type                  |  Services running on the asset. These services can include IP addresses trackers.                                                                                                                      |   address, AdblockPlusAcceptableAdsSignature                                                       |   `Equals` `Not Equals` `Starts with` `Does not start with` `In` `Not in` `Starts with in` `Does not start with in` `Contains` `Does Not Contain` `Contains In` `Does Not Contain In` `Empty` `Not Empty`                                                                  |
@@ -49,7 +50,6 @@ The following filters require that the user manually enters the value with which
 |     Country                         |   The country/region of origin detected for this asset.                                                                                                                                                         |   United States                                                                                    |                                                                                                                                                                                                                                                             |
 |     Country Code                    |   The country code associated with the asset.                                                                                                                                                            |   USA                                                                                              |                                                                                                                                                                                                                                                             |
 |     Domain Status                   |   Any detected domain configurations.                                                                                                                                                                    |   clientDeleteProhibited, clientRenewProhibited, clientTransferProhibited, clientUpdateProhibited  |                                                                                                                                                                                                                                                             |
-|     IANA ID                         |   The allocated unique ID for a domain, IP or AS seen within WhoIs, IANA and ICANN records.                                                                                                              |   1005                                                                                             |                                                                                                                                                                                                                                                             |
 |     IP Address                      |   Any known IPs associated to the host.                                                                                                                                                                  |   192.168.92.73                                                                                    |                                                                                                                                                                                                                                                             |
 |     IP Block                        |   The IP block that is associated with the asset.                                                                                                                                                        |   192.168.92.73/16                                                                                 |                                                                                                                                                                                                                                                             |
 |     Resource MD5                    |   The hash algorithm used to encode data.                                                                                                                                                                |                                                                                                    |                                                                                                                                                                                                                                                             |