Skip to content

Commit 1859659

Browse files
committed
new tabs
1 parent ba57e8b commit 1859659

File tree

1 file changed

+55
-45
lines changed

1 file changed

+55
-45
lines changed

articles/defender-for-iot/organizations/device-inventory.md

Lines changed: 55 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -94,56 +94,66 @@ Mark OT devices as *important* to highlight them for extra tracking. On an OT se
9494

9595
## Device inventory column data
9696

97-
The following table lists the columns available in the Defender for IoT device inventory on the Azure portal. Starred items **(*)** are also available from the OT sensor.
97+
The following table lists the columns available in the Defender for IoT device inventory on the Azure portal and the OT sensor, a description of each column and whether and in which platform it is editible. Starred items **(*)** are also available from the OT sensor.
9898

9999
> [!NOTE]
100100
> Noted features listed below are in PREVIEW. The [Azure Preview Supplemental Terms](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) include other legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
101101
102-
|Name |Description |
103-
|---------|---------|
104-
|**Authorization** * |Editable. Determines whether or not the device is marked as *authorized*. This value might need to change as the device security changes. Toggle **Authorized device**. |
105-
|**Business Function** | Editable. Describes the device's business function. |
106-
| **Class** | Editable. The device's class. <br>Default: `IoT` <!-- is this correct for me default was set to OT--> |
107-
|**Data source** | The source of the data, such as a micro agent, OT sensor, or Microsoft Defender for Endpoint. <br>Default: `MicroAgent` <!-- is this correct for me default was set to OT sensor-->|
108-
|**Description** * | Editable. The device's description. |
109-
| **Device Id** | The device's Azure-assigned ID number. |
110-
| **Firmware model** | Editable<I think!!>. The device's firmware model. |
111-
| ADDED this is in the details pane, but is called (hardware)Model/ Firmware model in the device inventory - i think the Model is the hardware model, **Firmware name** | Editable. The device's firmware name.|
112-
| **Firmware vendor** | The vendor of the device's firmware. |
113-
| **Firmware version** * |Editable. The device's firmware version. |
114-
|**First seen** * | The date and time the device was first seen. Shown in `MM/DD/YYYY HH:MM:SS AM/PM` format. On the OT sensor, shown as **Discovered**.|
115-
| ADDED **Hardware model** | Editable. The device's hardware model. |
116-
| ADDED **Hardware model** | Editable. The device's hardware model. |
117-
|**Importance** | Editable. The device's important level: `Low`, `Medium`, or `High`. |
118-
| **IPv4 Address** | The device's IPv4 address. |
119-
|**IPv6 Address** | The device's IPv6 address.|
120-
|**Last activity** * | The date and time the device last sent an event through to Azure or to the OT sensor, depending on where you're viewing the device inventory. Shown in `MM/DD/YYYY HH:MM:SS AM/PM` format. |
121-
|**Location** | Editable. The device's physical location. |
122-
| **MAC Address** * | The device's MAC address. |
123-
|**Model** *| Editable. The device's hardware model. <See hardware model above. in the details this is called hardware model?>|
102+
|Name |Description | Editable|
103+
|---------|---------|----|
104+
|**Authorization** * |Determines whether or not the device is marked as *authorized*. This value might need to change as the device security changes. Toggle **Authorized device**. | Editable in both Azure and the OT Sensor|
105+
|**Business Function** | Describes the device's business function. |Editable in OT Sensor|
106+
| **Class** | The device's class. <br>Default: `IoT` <!-- is this correct for me default was set to OT--> |Editable in OT Sensor|
107+
|**Data source** | The source of the data, such as a micro agent, OT sensor, or Microsoft Defender for Endpoint. <br>Default: `MicroAgent` <!-- is this correct for me default was set to OT sensor-->| Not editable|
108+
|**Description** * |The device's description. |Editable in both Azure and the OT Sensor|
109+
| **Device Id** | The device's Azure-assigned ID number. |Not editable|
110+
| **Firmware model** | The device's firmware model. |Editable in OT Sensor|
111+
| ADDED this is in the details pane, but is called (hardware)Model/ Firmware model in the device inventory - i think the Model is the hardware model, **Firmware name** | Editable. The device's firmware name.|Editable in OT Sensor|
112+
| **Firmware vendor** | The vendor of the device's firmware. |Not editable?|
113+
| **Firmware version** * |The device's firmware version. |Editable in both Azure and the OT Sensor|
114+
|**First seen** * | The date and time the device was first seen. Shown in `MM/DD/YYYY HH:MM:SS AM/PM` format. On the OT sensor, shown as **Discovered**.|Not editable|
115+
| ADDED **Hardware model** | The device's hardware model. |Editable in OT Sensor|
116+
|**Importance** | The device's important level: `Low`, `Medium`, or `High`. |Editable in OT Sensor|
117+
| **IPv4 Address** | The device's IPv4 address. |Not editable|
118+
|**IPv6 Address** | The device's IPv6 address.|Not editable|
119+
|**Last activity** * | The date and time the device last sent an event through to Azure or to the OT sensor, depending on where you're viewing the device inventory. Shown in `MM/DD/YYYY HH:MM:SS AM/PM` format. |Not editable|
120+
|**Location** | The device's physical location. |Editable in OT Sensor|
121+
| **MAC Address** * | The device's MAC address. |Not editable|
122+
|**Model** *| The device's hardware model. <See hardware model above. in the details this is called hardware model?>|Editable in both Azure and the OT Sensor|
124123
|**Name** * | Mandatory, and editable. The device's name as the sensor discovered it, or as entered by the user. |
125-
|**Network location** (Public preview) | The device's network location. Displays whether the device is defined as *local* or *routed*, according to the configured subnets. |
126-
|**OS architecture** | <!Editable!> in sensor?. The device's operating system architecture. |
127-
|**OS distribution** | <!Editable.!> in sensor? The device's operating system distribution, such as Android, Linux, and Haiku. |
128-
|**OS platform** * | <!Editable.!> in sensor? The device's operating system, if detected. On the OT sensor, shown as **Operating System**. |
129-
|**OS version** | <!Editable.!>in sensor? The device's operating system version, such as Windows 10 or Ubuntu 20.04.1. |
130-
|**PLC mode** * | The device's PLC operating mode, including both the *Key* state (physical / logical) and the *Run* state (logical). If both states are the same, then only one state is listed.<br><br>- Possible *Key* states include: `Run`, `Program`, `Remote`, `Stop`, `Invalid`, and `Programming Disabled`. <br><br>- Possible *Run* states are `Run`, `Program`, `Stop`, `Paused`, `Exception`, `Halted`, `Trapped`, `Idle`, or `Offline`. |
131-
|**Programming device** * | Editable. Defines whether the device is defined as a *Programming Device*, performing programming activities for PLCs, RTUs, and controllers, which are relevant to engineering stations. |
132-
|**Protocols** *| The protocols that the device uses. |
133-
| **Purdue level** | Editable. The Purdue level in which the device exists.|
134-
|**Scanner device** * | Editable. Defines whether the device performs scanning-like activities in the network. |
135-
|**Sensor**| The sensor the device is connected to. |
136-
|**Serial number** *| The device's serial number. |
137-
| **Site** | The device's site. <br><br>All Enterprise IoT sensors are automatically added to the **Enterprise network** site. |
138-
| **Slots** | The number of slots the device has. |
139-
| **Subtype** | Editable. The device's subtype, such as *Speaker* or *Smart TV*. <br>**Default**: `Managed Device` |
140-
| **Tags** | Editable. The device's tags. |
141-
|**Type** * | Editable. The device type, such as *Communication* or *Industrial*. <br>**Default**: `Miscellaneous` |
142-
|**Vendor** *| The name of the device's vendor, as defined in the MAC address. < Also inconsistent - in inventory called vendor, in pane called hardware vendor>|
143-
| **VLAN** * | The device's VLAN. |
144-
|**Zone** | The device's zone. |
145-
146-
The following columns are available on OT sensors only:
124+
|**Network location** (Public preview) | The device's network location. Displays whether the device is defined as *local* or *routed*, according to the configured subnets. |Not editable|
125+
|**OS architecture** |The device's operating system architecture. |Editable in OT Sensor|
126+
|**OS distribution** | The device's operating system distribution, such as Android, Linux, and Haiku. |Editable in OT Sensor|
127+
|**OS platform** * | The device's operating system, if detected. On the OT sensor, shown as **Operating System**. |Editable in both Azure and the OT Sensor|
128+
|**OS version** | The device's operating system version, such as Windows 10 or Ubuntu 20.04.1. |Editable in OT Sensor|
129+
|**PLC mode** * | The device's PLC operating mode, including both the *Key* state (physical / logical) and the *Run* state (logical). If both states are the same, then only one state is listed.<br><br>- Possible *Key* states include: `Run`, `Program`, `Remote`, `Stop`, `Invalid`, and `Programming Disabled`. <br><br>- Possible *Run* states are `Run`, `Program`, `Stop`, `Paused`, `Exception`, `Halted`, `Trapped`, `Idle`, or `Offline`. |Not editable|
130+
|**Programming device** * | Defines whether the device is defined as a *Programming Device*, performing programming activities for PLCs, RTUs, and controllers, which are relevant to engineering stations. |Editable in both Azure and the OT Sensor|
131+
|**Protocols** *| The protocols that the device uses. |Not editable|
132+
| **Purdue level** | The Purdue level in which the device exists.|Editable in OT Sensor|
133+
|**Scanner device** * |Defines whether the device performs scanning-like activities in the network. |Editable in both Azure and the OT Sensor|
134+
|**Sensor**| The sensor the device is connected to. |Not editable|
135+
|**Serial number** *| The device's serial number. |Not editable|
136+
| **Site** | The device's site. <br><br>All Enterprise IoT sensors are automatically added to the **Enterprise network** site. |Not editable|
137+
| **Slots** | The number of slots the device has. |Not editable|
138+
| **Subtype** | The device's subtype, such as *Speaker* or *Smart TV*. <br>**Default**: `Managed Device` |Editable in OT Sensor|
139+
| **Tags** | The device's tags. |Editable in OT Sensor|
140+
|**Type** * | The device type, such as *Communication* or *Industrial*. <br>**Default**: `Miscellaneous` |Editable in both Azure and the OT Sensor|
141+
|**Vendor** *| The name of the device's vendor, as defined in the MAC address. < Also inconsistent - in inventory called vendor, in pane called hardware vendor>|Not editable|
142+
| **VLAN** * | The device's VLAN. |Not editable|
143+
|**Zone** | The device's zone. |Not editable|
144+
145+
The following table lists the columns available in the OT sensors only, a description of each column and whether it is editible.
146+
147+
|Name |Description | Editable|
148+
|---------|---------|----|
149+
|**DHCP Address**| | |
150+
|**FQDN**| | |
151+
|**FQDN Last Lookup Time**| | |
152+
|**Groups**| | |
153+
|**Module address**| | |
154+
|**Rack**| The number of racks the device has.| |
155+
|**Slot**| The number of slots the device has.| |
156+
| **Unacknowledged Alerts**| The number of **Unacknowledged Alerts** alerts associated with the device| |
147157

148158
- The device's **DHCP Address**
149159
- The device's **FQDN** address and **FQDN Last Lookup Time**

0 commit comments

Comments
 (0)