Skip to content

Commit 2f31bc8

Browse files
authored
Merge pull request #190726 from batamig/non-blocking
Leftover non-blocking changes from IoT Feb release
2 parents 8bc36df + 042729f commit 2f31bc8

File tree

50 files changed

+225
-179
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

50 files changed

+225
-179
lines changed

articles/defender-for-iot/organizations/how-to-accelerate-alert-incident-response.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -124,13 +124,13 @@ The alert message indicates that a user-defined rule triggered the alert.
124124

125125
1. Select **Create rule** (**+**).
126126

127-
:::image type="content" source="media/how-to-work-with-alerts-sensor/custom-alerts-rules.png" alt-text="Create custom alert rules":::
127+
:::image type="content" source="media/how-to-work-with-alerts-sensor/custom-alerts-rules.png" alt-text="Screenshot of the Create custom alert rules pane.":::
128128

129129
1. Define an alert name.
130130
1. Select protocol to detect.
131131
1. Define a message to display. Alert messages can contain alphanumeric characters you enter, as well as traffic variables detected. For example, include the detected source and destination addresses in the alert messages. Use { } to add variables to the message
132132
1. Select the engine that should detect the activity.
133-
1. **Select the source and destination devices that pairs for which activity should be detected.**
133+
1. Select the source and destination devices for the activity you want to detect.
134134

135135
#### Create rule conditions
136136

@@ -165,13 +165,13 @@ Create conditions based on unique values associated with the category selected.
165165

166166
8. Enter a **Value** as a number. If the variable you selected is a MAC address or IP address, the value must be converted from a dotted-decimal address to decimal format. Use an IP address conversion tool, for example <https://www.ipaddressguide.com/ip>.
167167

168-
:::image type="content" source="media/how-to-work-with-alerts-sensor/custom-rule-conditions.png" alt-text="Custom rule condition":::
168+
:::image type="content" source="media/how-to-work-with-alerts-sensor/custom-rule-conditions.png" alt-text="Screenshot of the Custom rule condition options.":::
169169

170170
9. Select plus (**+**) to create a condition set.
171171

172172
When the rule condition or condition set is met, the alert is sent. You will be notified if the condition logic is not valid.
173173

174-
**Condition Based when activity took place**
174+
**Condition based on when activity took place**
175175

176176
Create conditions based on when the activity was detected. In the Detected section, select a time period and day in which the detection must occur in order to send the alert. You can choose to send the alert if the activity is detected:
177177
- any time throughout the day
@@ -191,7 +191,7 @@ The following actions can be defined for the rule:
191191

192192
The rule is added to the **Customized Alerts Rules** page.
193193

194-
:::image type="content" source="media/how-to-work-with-alerts-sensor/custom-alerts-page.png" alt-text="Custom alerts main page" lightbox="media/how-to-work-with-alerts-sensor/custom-alerts-page.png":::
194+
:::image type="content" source="media/how-to-work-with-alerts-sensor/custom-alerts-page.png" alt-text="Screenshot of the main Custom alerts page." lightbox="media/how-to-work-with-alerts-sensor/custom-alerts-page.png":::
195195

196196
### Managing customer alert rules
197197

@@ -213,6 +213,6 @@ Changes made to custom alert rules are tracked in the event timeline. For exampl
213213
1. Navigate to the Event timeline page.
214214

215215

216-
### See also
216+
## Next steps
217217

218-
[Manage the alert event](how-to-manage-the-alert-event.md)
218+
For more information, see [Manage the alert event](how-to-manage-the-alert-event.md).

articles/defender-for-iot/organizations/how-to-activate-and-set-up-your-on-premises-management-console.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -364,6 +364,6 @@ To unassign and delete a sensor:
364364
365365
1. To delete the unassigned sensor from the site, select the sensor from the list of unassigned sensors and select :::image type="icon" source="media/how-to-activate-and-set-up-your-on-premises-management-console/delete-icon.png" border="false":::.
366366
367-
## See also
367+
## Next steps
368368
369-
[Troubleshoot the sensor and on-premises management console](how-to-troubleshoot-the-sensor-and-on-premises-management-console.md)
369+
For more information, see [Troubleshoot the sensor and on-premises management console](how-to-troubleshoot-the-sensor-and-on-premises-management-console.md).

articles/defender-for-iot/organizations/how-to-activate-and-set-up-your-sensor.md

Lines changed: 21 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ Your sensor was onboarded to Microsoft Defender for IoT in a specific management
4646

4747
A locally connected, or cloud-connected activation file was generated and downloaded for this sensor during onboarding. The activation file contains instructions for the management mode of the sensor. *A unique activation file should be uploaded to each sensor you deploy.* The first time you sign in, you need to upload the relevant activation file for this sensor.
4848

49-
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/azure-defender-for-iot-activation-file-download-button.png" alt-text="Defender for IoT in the Azure portal, onboard sensor.":::
49+
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/azure-defender-for-iot-activation-file-download-button.png" alt-text="Screenshot of the download activation file for Defender for IoT sensors in the Azure portal.":::
5050

5151
### About certificates
5252

@@ -76,15 +76,15 @@ For more information about working with certificates, see [Manage certificates](
7676

7777
1. Go to the sensor console from your browser by using the IP defined during the installation. The sign-in dialog box opens.
7878

79-
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/sensor-log-in-1.png" alt-text="Sensor log in screen":::
79+
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/sensor-log-in-1.png" alt-text="Screenshot of a Defender for IoT sensor sign in page.":::
8080

8181

8282
1. Enter the credentials defined during the sensor installation, or select the **Password recovery** option. If you purchased a preconfigured sensor from Arrow, generate a password first. For more information on password recovery, see [Investigate password failure at initial sign-in](how-to-troubleshoot-the-sensor-and-on-premises-management-console.md#investigate-password-failure-at-initial-sign-in).
8383

8484

8585
1. Select **Login/Next**. The **Sensor Network Settings** tab opens.
8686

87-
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/sensor-log-in-wizard-activate.png" alt-text="log in to sensor":::
87+
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/sensor-log-in-wizard-activate.png" alt-text="Screenshot of the sensor network settings options when signing into the sensor.":::
8888

8989
1. Use this tab if you want to change the sensor network configuration before activation. The configuration parameters were defined during the software installation, or when you purchased a preconfigured sensor. The following parameters were defined:
9090

@@ -98,11 +98,11 @@ For more information about working with certificates, see [Manage certificates](
9898

9999
If you want to work with a proxy, enable the proxy toggle and add the proxy host, port and username.
100100

101-
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/sensor-log-in-wizard-activate-proxy.png" alt-text="Initial Log in to sensor using a proxy":::
101+
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/sensor-log-in-wizard-activate-proxy.png" alt-text="Screenshot of the proxy options for signing in to a sensor.":::
102102

103103
1. Select **Next.** The Activation tab opens.
104104

105-
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/wizard-upload-activation-file.png" alt-text="First time log in activation file":::
105+
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/wizard-upload-activation-file.png" alt-text="Screenshot of a first time activation file upload option.":::
106106

107107
1. Select **Upload** and go to the activation file that you downloaded during the sensor onboarding.
108108

@@ -112,7 +112,7 @@ For more information about working with certificates, see [Manage certificates](
112112

113113
It is **not recommended** to use a locally generated certificate in a production environment.
114114

115-
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/wizard-upload-activation-certificates-1.png" alt-text="Initial sensor login certificates":::
115+
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/wizard-upload-activation-certificates-1.png" alt-text="Screenshot of the SSL/TLS Certificates page when signing in to a sensor.":::
116116

117117
1. Enable the **Import trusted CA certificate (recommended)** toggle.
118118
1. Define a certificate name.
@@ -131,7 +131,7 @@ For information about uploading a new certificate, supported certificate paramet
131131

132132
For users with versions prior to 10.0, your license may expire, and the following alert will be displayed.
133133

134-
:::image type="content" source="media/how-to-activate-and-set-up-your-on-premises-management-console/activation-popup.png" alt-text="When your license expires you’ll need to update your license through the activation file.":::
134+
:::image type="content" source="media/how-to-activate-and-set-up-your-on-premises-management-console/activation-popup.png" alt-text="Screenshot of a license expiration popup message.":::
135135

136136
**To activate your license:**
137137

@@ -145,19 +145,19 @@ For users with versions prior to 10.0, your license may expire, and the followin
145145

146146
1. Paste the string into space provided.
147147

148-
:::image type="content" source="media/how-to-activate-and-set-up-your-on-premises-management-console/add-license.png" alt-text="Paste the string into the provided field.":::
148+
:::image type="content" source="media/how-to-activate-and-set-up-your-on-premises-management-console/add-license.png" alt-text="Screenshot of the license activation box and button.":::
149149

150150
1. Select **Activate**.
151151

152152
### Subsequent sign ins
153153

154154
After first-time activation, the Microsoft Defender for IoT sensor console opens after sign-in without requiring an activation file or certificate definition. You only need your sign-in credentials.
155155

156-
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/sensor-log-in-1.png" alt-text="Sensor login after initial activation":::
156+
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/sensor-log-in-1.png" alt-text="Screenshot of the sensor sign in page after the initial activation.":::
157157

158158
After your sign in, the Microsoft Defender for IoT sensor console opens.
159159

160-
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/initial-dashboard.png" alt-text="Screenshot that shows the Defender for IoT initial dashboard." lightbox="media/how-to-activate-and-set-up-your-sensor/initial-dashboard.png":::
160+
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/initial-dashboard.png" alt-text="Screenshot of the initial sensor console dashboard Overview page." lightbox="media/how-to-activate-and-set-up-your-sensor/initial-dashboard.png":::
161161

162162
## Initial setup and learning (for administrators)
163163

@@ -198,7 +198,7 @@ Before you sign in, verify that you have:
198198
- The sensor IP address.
199199
- Sign in credentials that your administrator provided.
200200

201-
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/sensor-log-in-1.png" alt-text="Sensor login after initial setup":::
201+
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/sensor-log-in-1.png" alt-text="Screenshot of the sensor sign in page after the initial setup.":::
202202

203203

204204
## Console tools: Overview
@@ -209,13 +209,13 @@ You can access console tools from the side menu. Tools help you:
209209
- Set up your sensor for maximum performance
210210
- Create and manage users
211211

212-
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/main-page-side-bar.png" alt-text="The main menu of the sensor console on the left side of the screen":::
212+
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/main-page-side-bar.png" alt-text="Screenshot of the sensor console's main menu on the left.":::
213213

214214
### Discover
215215

216216
| Tools| Description |
217217
| -----------|--|
218-
| Overview | View a dashboard with high-level information about your sensor deployment, alerts, traffic, and more. <!--- For more information, see TBD --->|
218+
| Overview | View a dashboard with high-level information about your sensor deployment, alerts, traffic, and more. |
219219
| Device map | View the network devices, device connections, Purdue levels, and device properties in a map. Various zoom, highlight, and filter options are available to help you gain the insight you need. For more information, see [Investigate sensor detections in the Device Map](how-to-work-with-the-sensor-device-map.md#investigate-sensor-detections-in-the-device-map). |
220220
| Device inventory | The Device inventory displays a list of device attributes that this sensor detects. Options are available to: <br /> - Sort, or filter the information according to the table fields, and see the filtered information displayed. <br /> - Export information to a CSV file. <br /> - Import Windows registry details. For more information, see [Investigate sensor detections in a device inventory](how-to-investigate-sensor-detections-in-a-device-inventory.md#investigate-sensor-detections-in-an-inventory).|
221221
| Alerts | Alerts are triggered when sensor engines detect changes or suspicious activity in network traffic that require your attention. For more information, see [View alerts on your sensor](how-to-view-alerts.md#view-alerts-on-your-sensor).|
@@ -253,19 +253,21 @@ You can access console tools from the side menu. Tools help you:
253253
- your sensor isn't detecting traffic
254254
- your sensor SSL certificate is expired or will expire soon
255255

256-
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/system-messages.png" alt-text="System messages screen on main sensor console page, viewed by selecting the bell icon":::
256+
:::image type="content" source="media/how-to-activate-and-set-up-your-sensor/system-messages.png" alt-text="Screenshot of the System messages area on the sensor console page, displayed after selecting the bell icon.":::
257257

258258
**To review system messages:**
259259
1. Sign into the sensor
260260
1. Select the **System Messages** icon (Bell icon).
261261

262262

263-
## See also
263+
## Next steps
264264

265-
[Threat intelligence research and packages ](how-to-work-with-threat-intelligence-packages.md)
265+
For more information, see:
266266

267-
[Onboard a sensor](getting-started.md#onboard-a-sensor)
267+
- [Threat intelligence research and packages ](how-to-work-with-threat-intelligence-packages.md)
268268

269-
[Manage sensor activation files](how-to-manage-individual-sensors.md#manage-sensor-activation-files)
269+
- [Onboard a sensor](getting-started.md#onboard-a-sensor)
270270

271-
[Control what traffic is monitored](how-to-control-what-traffic-is-monitored.md)
271+
- [Manage sensor activation files](how-to-manage-individual-sensors.md#manage-sensor-activation-files)
272+
273+
- [Control what traffic is monitored](how-to-control-what-traffic-is-monitored.md)

articles/defender-for-iot/organizations/how-to-analyze-programming-details-changes.md

Lines changed: 13 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ You may need to review programming activity:
3030

3131
- When a process or machine is not working correctly (to see who carried out the last update and when)
3232

33-
:::image type="content" source="media/how-to-work-with-maps/differences.png" alt-text="Programming Change Log":::
33+
:::image type="content" source="media/how-to-work-with-maps/differences.png" alt-text="Screenshot of a Programming Change Log":::
3434

3535
Other options let you:
3636

@@ -56,13 +56,13 @@ Access the Programming Analysis window from the:
5656

5757
Use the event timeline to display a timeline of events in which programming changes were detected.
5858

59-
:::image type="content" source="media/how-to-work-with-maps/timeline.png" alt-text="A view of the event timeline.":::
59+
:::image type="content" source="media/how-to-work-with-maps/timeline.png" alt-text="Screenshot of the event timeline.":::
6060

6161
### Unauthorized programming alerts
6262

6363
Alerts are triggered when unauthorized programming devices carry out programming activities.
6464

65-
:::image type="content" source="media/how-to-work-with-maps/unauthorized.png" alt-text="Unauthorized programming alerts":::
65+
:::image type="content" source="media/how-to-work-with-maps/unauthorized.png" alt-text="Screenshot of unauthorized programming alerts":::
6666

6767
> [!NOTE]
6868
> You can also view basic programming information in the Device Properties window and Device Inventory.
@@ -75,7 +75,7 @@ This section describes how to view programming files and compare versions. Searc
7575

7676
- File type
7777

78-
:::image type="content" source="media/how-to-work-with-maps/timeline-view.png" alt-text="programming timeline window":::
78+
:::image type="content" source="media/how-to-work-with-maps/timeline-view.png" alt-text="Screenshot of a programming timeline window.":::
7979

8080
|Programming timeline type | Description |
8181
|--|--|
@@ -98,7 +98,7 @@ This section describes how to choose a file to review.
9898

9999
2. Select a file from the File pane. The file appears in the Current pane.
100100

101-
:::image type="content" source="media/how-to-work-with-maps/choose-file.png" alt-text="Select the file to work with.":::
101+
:::image type="content" source="media/how-to-work-with-maps/choose-file.png" alt-text="Screenshot of selecting the file you want to work with.":::
102102

103103
### Compare files
104104

@@ -112,17 +112,17 @@ This section describes how to compare programming files.
112112

113113
3. Select the compare indicator.
114114

115-
:::image type="content" source="media/how-to-work-with-maps/compare.png" alt-text="Compare indicator":::
115+
:::image type="content" source="media/how-to-work-with-maps/compare.png" alt-text="Screenshot of the compare indicator.":::
116116

117117
The window displays all dates the selected file was detected on the programmed device. The file may have been updated on the programmed device by multiple programming devices.
118118

119119
The number of differences detected appears in the upper right-hand corner of the window. You may need to scroll down to view differences.
120120

121-
:::image type="content" source="media/how-to-work-with-maps/scroll.png" alt-text="scroll down to your selection":::
121+
:::image type="content" source="media/how-to-work-with-maps/scroll.png" alt-text="Screenshot of scrolling down to your selection.":::
122122

123123
The number is calculated by adjacent lines of changed text. For example, if eight consecutive lines of code were changed (deleted, updated, or added) this will be calculated as one difference.
124124

125-
:::image type="content" source="media/how-to-work-with-maps/program-timeline.png" alt-text="Your programming timeline view." lightbox="media/how-to-work-with-maps/program-timeline.png":::
125+
:::image type="content" source="media/how-to-work-with-maps/program-timeline.png" alt-text="Screenshot of the programming timeline view." lightbox="media/how-to-work-with-maps/program-timeline.png":::
126126

127127
4. Select a date. The file detected on the selected date appears in the window.
128128

@@ -135,4 +135,8 @@ In addition to reviewing details in the Programming Timeline, you can access pro
135135
| Device type | Description |
136136
|--|--|
137137
| Device properties | The device properties window provides information on the last programming event detected on the device. |
138-
| The device inventory | The device inventory indicates if the device is a programming device. <br> :::image type="content" source="media/how-to-work-with-maps/inventory-v2.png" alt-text="The inventory of devices"::: |
138+
| The device inventory | The device inventory indicates if the device is a programming device. <br> :::image type="content" source="media/how-to-work-with-maps/inventory-v2.png" alt-text="Screenshot of the device inventory page."::: |
139+
140+
## Next steps
141+
142+
For more information, see [Import device information to a sensor](how-to-import-device-information.md).

articles/defender-for-iot/organizations/how-to-configure-windows-endpoint-monitoring.md

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,3 +32,6 @@ Before you begin scanning, create a firewall rule that allows outgoing traffic f
3232
1. Select **Save** to save the automatic scan settings.
3333
1. When the scan is finished, select to view/export scan results.
3434

35+
## Next steps
36+
37+
For more information, see [Work with device notifications](how-to-work-with-device-notifications.md).

articles/defender-for-iot/organizations/how-to-connect-sensor-by-proxy.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -84,6 +84,6 @@ This section describes how to set up a sensor to use Squid.
8484
8585
1. Select **Save**.
8686
87-
## See also
87+
## Next steps
8888
89-
[Manage your subscriptions](how-to-manage-subscriptions.md).
89+
For more information, see [Manage your subscriptions](how-to-manage-subscriptions.md).

0 commit comments

Comments
 (0)