You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/defender-for-iot/organizations/device-inventory.md
+55-45Lines changed: 55 additions & 45 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -94,56 +94,66 @@ Mark OT devices as *important* to highlight them for extra tracking. On an OT se
94
94
95
95
## Device inventory column data
96
96
97
-
The following table lists the columns available in the Defender for IoT device inventory on the Azure portal. Starred items **(*)** are also available from the OT sensor.
97
+
The following table lists the columns available in the Defender for IoT device inventory on the Azure portal and the OT sensor, a description of each column and whether and in which platform it is editible. Starred items **(*)** are also available from the OT sensor.
98
98
99
99
> [!NOTE]
100
100
> Noted features listed below are in PREVIEW. The [Azure Preview Supplemental Terms](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) include other legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
101
101
102
-
|Name |Description |
103
-
|---------|---------|
104
-
|**Authorization** * |Editable. Determines whether or not the device is marked as *authorized*. This value might need to change as the device security changes. Toggle **Authorized device**. |
105
-
|**Business Function**| Editable. Describes the device's business function. |
106
-
|**Class**| Editable. The device's class. <br>Default: `IoT`<!-- is this correct for me default was set to OT-->|
107
-
|**Data source**| The source of the data, such as a micro agent, OT sensor, or Microsoft Defender for Endpoint. <br>Default: `MicroAgent`<!-- is this correct for me default was set to OT sensor-->|
108
-
|**Description** * | Editable. The device's description. |
109
-
|**Device Id**| The device's Azure-assigned ID number. |
110
-
|**Firmware model**| Editable<I think!!>. The device's firmware model. |
111
-
| ADDED this is in the details pane, but is called (hardware)Model/ Firmware model in the device inventory - i think the Model is the hardware model, **Firmware name**| Editable. The device's firmware name.|
112
-
|**Firmware vendor**| The vendor of the device's firmware. |
113
-
|**Firmware version** * |Editable. The device's firmware version. |
114
-
|**First seen** * | The date and time the device was first seen. Shown in `MM/DD/YYYY HH:MM:SS AM/PM` format. On the OT sensor, shown as **Discovered**.|
115
-
| ADDED **Hardware model**| Editable. The device's hardware model. |
116
-
| ADDED **Hardware model**| Editable. The device's hardware model. |
117
-
|**Importance**| Editable. The device's important level: `Low`, `Medium`, or `High`. |
118
-
|**IPv4 Address**| The device's IPv4 address. |
119
-
|**IPv6 Address**| The device's IPv6 address.|
120
-
|**Last activity** * | The date and time the device last sent an event through to Azure or to the OT sensor, depending on where you're viewing the device inventory. Shown in `MM/DD/YYYY HH:MM:SS AM/PM` format. |
121
-
|**Location**| Editable. The device's physical location. |
122
-
|**MAC Address** * | The device's MAC address. |
123
-
|**Model** *| Editable. The device's hardware model. <See hardware model above. in the details this is called hardware model?>|
102
+
|Name |Description | Editable|
103
+
|---------|---------|----|
104
+
|**Authorization** * |Determines whether or not the device is marked as *authorized*. This value might need to change as the device security changes. Toggle **Authorized device**. | Editable in both Azure and the OT Sensor|
105
+
|**Business Function**| Describes the device's business function. |Editable in OT Sensor|
106
+
|**Class**| The device's class. <br>Default: `IoT`<!-- is this correct for me default was set to OT-->|Editable in OT Sensor|
107
+
|**Data source**| The source of the data, such as a micro agent, OT sensor, or Microsoft Defender for Endpoint. <br>Default: `MicroAgent`<!-- is this correct for me default was set to OT sensor-->| Not editable|
108
+
|**Description** * |The device's description. |Editable in both Azure and the OT Sensor|
109
+
|**Device Id**| The device's Azure-assigned ID number. |Not editable|
110
+
|**Firmware model**| The device's firmware model. |Editable in OT Sensor|
111
+
| ADDED this is in the details pane, but is called (hardware)Model/ Firmware model in the device inventory - i think the Model is the hardware model, **Firmware name**| Editable. The device's firmware name.|Editable in OT Sensor|
112
+
|**Firmware vendor**| The vendor of the device's firmware. |Not editable?|
113
+
|**Firmware version** * |The device's firmware version. |Editable in both Azure and the OT Sensor|
114
+
|**First seen** * | The date and time the device was first seen. Shown in `MM/DD/YYYY HH:MM:SS AM/PM` format. On the OT sensor, shown as **Discovered**.|Not editable|
115
+
| ADDED **Hardware model**| The device's hardware model. |Editable in OT Sensor|
116
+
|**Importance**| The device's important level: `Low`, `Medium`, or `High`. |Editable in OT Sensor|
117
+
|**IPv4 Address**| The device's IPv4 address. |Not editable|
118
+
|**IPv6 Address**| The device's IPv6 address.|Not editable|
119
+
|**Last activity** * | The date and time the device last sent an event through to Azure or to the OT sensor, depending on where you're viewing the device inventory. Shown in `MM/DD/YYYY HH:MM:SS AM/PM` format. |Not editable|
120
+
|**Location**| The device's physical location. |Editable in OT Sensor|
121
+
|**MAC Address** * | The device's MAC address. |Not editable|
122
+
|**Model** *| The device's hardware model. <See hardware model above. in the details this is called hardware model?>|Editable in both Azure and the OT Sensor|
124
123
|**Name** * | Mandatory, and editable. The device's name as the sensor discovered it, or as entered by the user. |
125
-
|**Network location** (Public preview) | The device's network location. Displays whether the device is defined as *local* or *routed*, according to the configured subnets. |
126
-
|**OS architecture**|<!Editable!> in sensor?. The device's operating system architecture. |
127
-
|**OS distribution**|<!Editable.!> in sensor? The device's operating system distribution, such as Android, Linux, and Haiku. |
128
-
|**OS platform** * |<!Editable.!> in sensor? The device's operating system, if detected. On the OT sensor, shown as **Operating System**. |
129
-
|**OS version**|<!Editable.!>in sensor? The device's operating system version, such as Windows 10 or Ubuntu 20.04.1. |
130
-
|**PLC mode** * | The device's PLC operating mode, including both the *Key* state (physical / logical) and the *Run* state (logical). If both states are the same, then only one state is listed.<br><br>- Possible *Key* states include: `Run`, `Program`, `Remote`, `Stop`, `Invalid`, and `Programming Disabled`. <br><br>- Possible *Run* states are `Run`, `Program`, `Stop`, `Paused`, `Exception`, `Halted`, `Trapped`, `Idle`, or `Offline`. |
131
-
|**Programming device** * | Editable. Defines whether the device is defined as a *Programming Device*, performing programming activities for PLCs, RTUs, and controllers, which are relevant to engineering stations. |
132
-
|**Protocols** *| The protocols that the device uses. |
133
-
|**Purdue level**| Editable. The Purdue level in which the device exists.|
134
-
|**Scanner device** * | Editable. Defines whether the device performs scanning-like activities in the network. |
135
-
|**Sensor**| The sensor the device is connected to. |
136
-
|**Serial number** *| The device's serial number. |
137
-
|**Site**| The device's site. <br><br>All Enterprise IoT sensors are automatically added to the **Enterprise network** site. |
138
-
|**Slots**| The number of slots the device has. |
139
-
|**Subtype**| Editable. The device's subtype, such as *Speaker* or *Smart TV*. <br>**Default**: `Managed Device`|
140
-
|**Tags**| Editable. The device's tags. |
141
-
|**Type** * | Editable. The device type, such as *Communication* or *Industrial*. <br>**Default**: `Miscellaneous`|
142
-
|**Vendor** *| The name of the device's vendor, as defined in the MAC address. < Also inconsistent - in inventory called vendor, in pane called hardware vendor>|
143
-
|**VLAN** * | The device's VLAN. |
144
-
|**Zone**| The device's zone. |
145
-
146
-
The following columns are available on OT sensors only:
124
+
|**Network location** (Public preview) | The device's network location. Displays whether the device is defined as *local* or *routed*, according to the configured subnets. |Not editable|
125
+
|**OS architecture**|The device's operating system architecture. |Editable in OT Sensor|
126
+
|**OS distribution**| The device's operating system distribution, such as Android, Linux, and Haiku. |Editable in OT Sensor|
127
+
|**OS platform** * | The device's operating system, if detected. On the OT sensor, shown as **Operating System**. |Editable in both Azure and the OT Sensor|
128
+
|**OS version**| The device's operating system version, such as Windows 10 or Ubuntu 20.04.1. |Editable in OT Sensor|
129
+
|**PLC mode** * | The device's PLC operating mode, including both the *Key* state (physical / logical) and the *Run* state (logical). If both states are the same, then only one state is listed.<br><br>- Possible *Key* states include: `Run`, `Program`, `Remote`, `Stop`, `Invalid`, and `Programming Disabled`. <br><br>- Possible *Run* states are `Run`, `Program`, `Stop`, `Paused`, `Exception`, `Halted`, `Trapped`, `Idle`, or `Offline`. |Not editable|
130
+
|**Programming device** * | Defines whether the device is defined as a *Programming Device*, performing programming activities for PLCs, RTUs, and controllers, which are relevant to engineering stations. |Editable in both Azure and the OT Sensor|
131
+
|**Protocols** *| The protocols that the device uses. |Not editable|
132
+
|**Purdue level**| The Purdue level in which the device exists.|Editable in OT Sensor|
133
+
|**Scanner device** * |Defines whether the device performs scanning-like activities in the network. |Editable in both Azure and the OT Sensor|
134
+
|**Sensor**| The sensor the device is connected to. |Not editable|
135
+
|**Serial number** *| The device's serial number. |Not editable|
136
+
|**Site**| The device's site. <br><br>All Enterprise IoT sensors are automatically added to the **Enterprise network** site. |Not editable|
137
+
|**Slots**| The number of slots the device has. |Not editable|
138
+
|**Subtype**| The device's subtype, such as *Speaker* or *Smart TV*. <br>**Default**: `Managed Device`|Editable in OT Sensor|
139
+
|**Tags**| The device's tags. |Editable in OT Sensor|
140
+
|**Type** * | The device type, such as *Communication* or *Industrial*. <br>**Default**: `Miscellaneous`|Editable in both Azure and the OT Sensor|
141
+
|**Vendor** *| The name of the device's vendor, as defined in the MAC address. < Also inconsistent - in inventory called vendor, in pane called hardware vendor>|Not editable|
142
+
|**VLAN** * | The device's VLAN. |Not editable|
143
+
|**Zone**| The device's zone. |Not editable|
144
+
145
+
The following table lists the columns available in the OT sensors only, a description of each column and whether it is editible.
146
+
147
+
|Name |Description | Editable|
148
+
|---------|---------|----|
149
+
|**DHCP Address**|||
150
+
|**FQDN**|||
151
+
|**FQDN Last Lookup Time**|||
152
+
|**Groups**|||
153
+
|**Module address**|||
154
+
|**Rack**| The number of racks the device has.||
155
+
|**Slot**| The number of slots the device has.||
156
+
|**Unacknowledged Alerts**| The number of **Unacknowledged Alerts** alerts associated with the device||
147
157
148
158
- The device's **DHCP Address**
149
159
- The device's **FQDN** address and **FQDN Last Lookup Time**
0 commit comments