Merge pull request #221102 from miashapan/overview-changes

v-regandowner · web-flow · commit 84f30d04649c · 2022-12-14T10:10:27.000-05:00
Overview changes
diff --git a/articles/defender-for-iot/device-builders/TOC.yml b/articles/defender-for-iot/device-builders/TOC.yml
@@ -21,9 +21,9 @@
   - name: Add a resource group to your IoT solution
     displayName: resources, monitored, resource
     href: tutorial-configure-your-solution.md
-  - name: Create a DefenderforIoTMicroAgent module twin (Preview)
+  - name: Create a DefenderforIoTMicroAgent module twin
     href: tutorial-create-micro-agent-module-twin.md
-  - name: Install the Microsoft Defender for IoT micro agent (Preview)
+  - name: Install the Microsoft Defender for IoT micro agent 
     displayName: package, authentication, methods, certificate, authenticate, version
     href: tutorial-standalone-agent-binary-installation.md
   - name: Investigate security recommendations
@@ -32,26 +32,26 @@
     href: tutorial-investigate-security-alerts.md
 - name: Concepts
   items:
-  - name: Agent portfolio overview and OS support (Preview)
+  - name: Agent portfolio overview and OS support 
     displayName: standalone agent, micro agent, RTOS
     href: concept-agent-portfolio-overview-os-support.md
-  - name: Standalone micro agent overview (Preview)
+  - name: Standalone micro agent overview 
     displayName: endpoint, posture, distribution, flexible, model
     href: concept-standalone-micro-agent-overview.md
   - name: Data processing and residency
     href: concept-data-processing.md
-  - name: Micro agent configurations (Preview)
+  - name: Micro agent configurations 
     displayNAme: collectors, configuration, configurations, event-based, trigger, general
     href: concept-micro-agent-configuration.md
-  - name: Micro agent event collection (Preview)
+  - name: Micro agent event collection 
     displayName: process events, network connection
     href: concept-event-aggregation.md
   - name: Micro agent linux dependencies
     displayName: linux, micro agent, agent
     href: concept-micro-agent-linux-dependencies.md
   - name: Security alerts
     items:
-    - name: Micro agent security alerts (Preview)
+    - name: Micro agent security alerts 
       href: concept-agent-based-security-alerts.md
     - name: Built-in alerts for IoT Hub
       displayName: binary command line, disable firewall, port forwarding detection, possible attempt to disable auditd logging detected, reverse shells, successful bruteforce attempt, successful local login, web shell, Behavior similar, Crypto coin, suspicious, Exposed Docker, 
@@ -62,7 +62,7 @@
     href: concept-recommendations.md
 - name: How-to guides
   items:
-  - name: Install Defender for IoT micro agent for Edge (Preview)
+  - name: Install Defender for IoT micro agent for Edge
     displayName: Edge, micro agent,
     href: how-to-install-micro-agent-for-edge.md
   - name: Upgrade a Defender for IoT micro agent
@@ -79,14 +79,14 @@
   - name: Create custom alerts
     displayName: security group
     href: quickstart-create-custom-alerts.md
-  - name: Defender-IoT-micro-agent for Azure RTOS
+  - name: Defender-IoT-micro-agent for Azure RTOS (Preview)
     href: iot-security-azure-rtos.md
     items:
-    - name: Work with Defender-IoT-micro-agent for Azure RTOS
+    - name: Work with Defender-IoT-micro-agent for Azure RTOS (Preview)
       href: how-to-azure-rtos-security-module.md
-    - name: Understand the Defender-IoT-micro-agent for Azure RTOS
+    - name: Understand the Defender-IoT-micro-agent for Azure RTOS (Preview)
       href: concept-rtos-security-module.md
-    - name: Defender-IoT-micro-agent for Azure RTOS alerts and recommendations 
+    - name: Defender-IoT-micro-agent for Azure RTOS alerts and recommendations (Preview)
       href: concept-rtos-security-alerts-recommendations.md
   - name: Manage cloud device inventory
     href: how-to-manage-device-inventory-on-the-cloud.md
@@ -95,7 +95,7 @@
     href: how-to-region-move.md
   - name: Troubleshoot
     items:
-    - name: Defender for IoT micro agent troubleshooting (Preview)
+    - name: Defender for IoT micro agent troubleshooting
       displayName: service status, review logs
       href: troubleshoot-defender-micro-agent.md
 - name: Legacy agent
@@ -164,7 +164,7 @@
     href: how-to-investigate-device.md
 - name: Reference
   items:
-  - name: Defender-IoT-micro-agent for Azure RTOS API
+  - name: Defender-IoT-micro-agent for Azure RTOS API (Preview)
     displayNAme: prototype, disable
     href: azure-rtos-security-module-api.md
   - name: Frequently asked questions
diff --git a/articles/defender-for-iot/device-builders/concept-agent-based-security-alerts.md b/articles/defender-for-iot/device-builders/concept-agent-based-security-alerts.md
@@ -1,11 +1,11 @@
 ---
-title: Micro agent security alerts (Preview)
+title: Micro agent security alerts
 description: Learn about security alerts and recommended remediation using Defender for IoT device's features, and services.
 ms.topic: conceptual
 ms.date: 11/09/2021
 ---
 
-# Micro agent security alerts (Preview)
+# Micro agent security alerts
 
 Defender for IoT continuously analyzes your IoT solution using advanced analytics and threat intelligence to alert you to malicious activity.
 In addition, you can create custom alerts based on your knowledge of expected device behavior.
diff --git a/articles/defender-for-iot/device-builders/concept-agent-portfolio-overview-os-support.md b/articles/defender-for-iot/device-builders/concept-agent-portfolio-overview-os-support.md
@@ -1,11 +1,11 @@
 ---
-title: Agent portfolio overview and OS support (Preview)
+title: Agent portfolio overview and OS support
 description: Microsoft Defender for IoT provides a large portfolio of agents based on the device type. 
 ms.date: 01/09/2022
 ms.topic: conceptual
 ---
 
-# Agent portfolio overview and OS support (Preview)
+# Agent portfolio overview and OS support
 
 Microsoft Defender for IoT provides a large portfolio of agents based on the device type.
 
@@ -31,6 +31,6 @@ The Microsoft Defender for IoT micro agent comes built in as part of the Azure R
 
 ## Next steps
 
-Learn more about [Micro agent Linux dependencies (Preview)](concept-micro-agent-linux-dependencies.md).
+Learn more about [Micro agent Linux dependencies](concept-micro-agent-linux-dependencies.md).
 
-Learn more about the [Standalone micro agent overview (Preview)](concept-standalone-micro-agent-overview.md).
+Learn more about the [Standalone micro agent overview](concept-standalone-micro-agent-overview.md).
diff --git a/articles/defender-for-iot/device-builders/concept-event-aggregation.md b/articles/defender-for-iot/device-builders/concept-event-aggregation.md
@@ -1,11 +1,11 @@
 ---
-title: Micro agent event collection (Preview)
+title: Micro agent event collection
 description: Defender for IoT security agents collect data and system events from your local device, and send the data to the Azure cloud for processing, and analytics.
 ms.date: 04/26/2022
 ms.topic: conceptual
 ---
 
-# Micro agent event collection (Preview)
+# Micro agent event collection
 
 Defender for IoT security agents collect data and system events from your local device, and send the data to the Azure cloud for processing.
 
@@ -159,5 +159,5 @@ When the agent collects similar events to the ones that are already stored in me
 
 For more information, see:
 
-- [Micro agent configurations (Preview)](concept-micro-agent-configuration.md)
+- [Micro agent configurations](concept-micro-agent-configuration.md)
 - Check your [Defender for IoT security alerts](concept-security-alerts.md).
diff --git a/articles/defender-for-iot/device-builders/concept-micro-agent-configuration.md b/articles/defender-for-iot/device-builders/concept-micro-agent-configuration.md
@@ -1,11 +1,11 @@
 ---
-title: Micro agent configurations (Preview)
+title: Micro agent configurations
 description: The collector sends all current data immediately after any configuration change is made. The configuration changes are then applied.
 ms.date: 05/03/2022
 ms.topic: conceptual
 ---
 
-# Micro agent configurations (Preview)
+# Micro agent configurations
 
 This article describes the different types of configurations that the micro agent supports. Customers can configure the micro agent to fit the needs of their devices, and network environments.  
 
@@ -113,4 +113,4 @@ Configure the micro agent using the following collector-specific properties and
 
 For more information, see:
 - [Configure a micro agent twin](how-to-configure-micro-agent-twin.md).
-- [Micro agent event collection (Preview)](concept-event-aggregation.md)
+- [Micro agent event collection](concept-event-aggregation.md)
diff --git a/articles/defender-for-iot/device-builders/concept-micro-agent-linux-dependencies.md b/articles/defender-for-iot/device-builders/concept-micro-agent-linux-dependencies.md
@@ -1,17 +1,17 @@
 ---
-title: Micro agent Linux dependencies (Preview)  
+title: Micro agent Linux dependencies  
 description: This article describes the different Linux OS dependencies for the Defender for IoT micro agent. 
 ms.topic: conceptual
 ms.date: 11/09/2021
 ---
 
-# Micro agent Linux dependencies (Preview)
+# Micro agent Linux dependencies
 
-This article describes the different Linux OS dependencies for the Defender for IoT micro agent. 
+This article describes the different Linux OS dependencies for the Defender for IoT micro agent.
 
 ## Linux dependencies
 
-The table below shows the Linux dependencies for each component. 
+The table below shows the Linux dependencies for each component.
 
 | Component | Dependency | Type | Required by IoT SDK | Notes |
 |--|--|--|--|--|
@@ -40,4 +40,4 @@ The table below shows the Linux dependencies for each component.
 
 ## Next steps
 
-[Install the Defender for IoT micro agent (Preview)](quickstart-standalone-agent-binary-installation.md).
+[Install the Defender for IoT micro agent](quickstart-standalone-agent-binary-installation.md).
diff --git a/articles/defender-for-iot/device-builders/concept-standalone-micro-agent-overview.md b/articles/defender-for-iot/device-builders/concept-standalone-micro-agent-overview.md
@@ -1,11 +1,11 @@
 ---
-title: Standalone micro agent overview (Preview)
+title: Standalone micro agent overview 
 description: The Microsoft Defender for IoT security agents allow you to build security directly into your new IoT devices and Azure IoT projects.
 ms.date: 12/13/2021
 ms.topic: conceptual
 ---
 
-# Standalone micro agent overview (Preview)
+# Standalone micro agent overview
 
 Security is a near-universal concern for IoT implementers. IoT devices have unique needs for endpoint monitoring, security posture management, and threat detection – all with highly specific performance requirements.
 
@@ -37,4 +37,4 @@ The Microsoft Defender for IoT micro agent is easy to deploy, and has minimal pe
 
 ## Next steps
 
-Check your [Micro agent authentication methods (Preview)](concept-security-agent-authentication.md).
+Check your [Micro agent authentication methods](concept-security-agent-authentication.md).
diff --git a/articles/defender-for-iot/device-builders/configure-pam-to-audit-sign-in-events.md b/articles/defender-for-iot/device-builders/configure-pam-to-audit-sign-in-events.md
@@ -19,7 +19,7 @@ Before you get started, make sure that you have a Defender for IoT Micro Agent.
 
 Configuring PAM requires technical knowledge.
 
-For more information, see [Tutorial: Install the Defender for IoT micro agent (Preview)](tutorial-standalone-agent-binary-installation.md).
+For more information, see [Tutorial: Install the Defender for IoT micro agent](tutorial-standalone-agent-binary-installation.md).
 
 ## Modify PAM configuration to report sign-in and sign-out events
 
@@ -100,4 +100,4 @@ This procedure describes how to verify that you've configured PAM correctly to a
 
 ## Next steps
 
-For more information, see [Micro agent event collection (Preview)](concept-event-aggregation.md).
+For more information, see [Micro agent event collection](concept-event-aggregation.md).
diff --git a/articles/defender-for-iot/device-builders/how-to-configure-micro-agent-twin.md b/articles/defender-for-iot/device-builders/how-to-configure-micro-agent-twin.md
@@ -90,7 +90,6 @@ Learn how to configure a micro agent twin.
 
 You learned how to configure a micro agent twin. For more information about micro agent configurations and event aggregation, see:
 
-- [Micro agent configurations (Preview)](concept-micro-agent-configuration.md)
-
-- [Micro agent event collection (Preview)](concept-event-aggregation.md)
+- [Micro agent configurations](concept-micro-agent-configuration.md)
 
+- [Micro agent event collection](concept-event-aggregation.md)
diff --git a/articles/defender-for-iot/device-builders/how-to-install-micro-agent-for-edge.md b/articles/defender-for-iot/device-builders/how-to-install-micro-agent-for-edge.md
@@ -1,11 +1,11 @@
 ---
-title: Install Defender for IoT micro agent for Edge (Preview)
+title: Install Defender for IoT micro agent for Edge
 description: Learn how to install, and authenticate the Defender Micro agent for Edge.
 ms.date: 02/08/2022
 ms.topic: how-to
 ---
 
-# Install Defender for IoT micro agent for Edge (Preview)
+# Install Defender for IoT micro agent for Edge
 
 This article explains how to install, and authenticate the Defender micro agent for Edge.
 
diff --git a/articles/defender-for-iot/device-builders/media/overview/micro-agent-architecture.png b/articles/defender-for-iot/device-builders/media/overview/micro-agent-architecture.png
diff --git a/articles/defender-for-iot/device-builders/overview.md b/articles/defender-for-iot/device-builders/overview.md
@@ -14,20 +14,11 @@ For IoT implementers, security is a near-universal concern. IoT devices have uni
 
 Microsoft Defender for IoT provides lightweight security agents so that you can build security directly into your new IoT/OT initiatives. The micro agent provides endpoint visibility into security posture management and threat detection, and integrates with other Microsoft tools for unified security management.
 
-- **Security posture management**: You can proactively monitor the security posture of your IoT devices. Defender for IoT provides security posture recommendations based on the CIS benchmark, along with device-specific recommendations. Get visibility into operating system security, including OS configuration, firewall settings, and permissions.
-- **Endpoint threat detection**: Detect threats like botnets, brute force attempts, crypto miners, and suspicious network activity. Create custom alerts to target the most important threats in your organization. 
-- **IoT Hub integration**: Defender for IoT is enabled by default in every new IoT Hub that is created. Defender for IoT provides real-time monitoring, recommendations, and alerts, without requiring agent installation on any devices. Defender for IoT uses advanced analytics on logged IoT Hub meta data to analyze and protect your field devices and IoT hubs.
-
-
-## Security posture management
-
-
-The Defender for IoT micro agent enables you to quickly improve your organization's device security and defense capabilities by offering CIS best practice configurations, along with constant identification of any existing weak links in your OS security posture. CIS benchmark-based OS baseline recommendations help identify issues with device security hygiene, and prioritize changes for security hardening.  
-
-- CIS benchmarks are the best practices for securely configuring a target system. CIS benchmarks are developed through a unique, consensus-based process, comprised of cybersecurity professionals and subject matter experts around the world.
-- CIS benchmarks are the only consensus-based, best-practice security configuration guides that are both developed, and accepted by government, business, industry, and academia.
-
-
+- **Security posture management**: Monitor the security posture of your IoT devices. Defender for IoT provides security posture recommendations based on the CIS benchmark, along with device-specific recommendations. Get visibility into operating system security, including OS configuration, firewall settings, and permissions.
+- **Endpoint threat detection**: Detect threats like botnets, brute force attempts, crypto miners, hardware connections, and suspicious network activity using the Microsoft TI database.
+- **Device vulnerabilities management**: Monitor a full list of all your devices vulnerabilities based on a real-time dynamic SBoM and your operating system.
+- **Microsoft Sentinel integration**: Use Microsoft Sentinel to investigate and manage your devices security, create custom dashboards and automatic response playbooks.
+- **Raw events investigation**: Investigate all the raw events sent from your devices in your Log Analytics workspace.
 
 ## Defender for IoT micro agent
 
@@ -38,21 +29,9 @@ The Defender for IoT micro agent provides deep security protection, and visibili
 - The micro agent has flexible deployment options. The micro agent includes source code, so you can incorporate it into firmware, or customize it to include only what you need. It's also available as a binary package, or integrated directly into other Azure IoT solutions. The micro agent is available for standard IoT operating systems, such as Linux and Azure RTOS.
 - The agents are highly customizable, allowing you to use them for specific tasks, such as sending only important information at the fastest SLA, or for aggregating extensive security information and context into larger segments, avoiding higher service costs.
 
-
-## IoT Hub integration
-
-- Device agents, and other applications use the **Azure send security message SDK** to send security information into Azure IoT hub. IoT hub gets this information and forwards it to the Defender for IoT service.
-- Once the Defender for IoT service is enabled, in addition to the forwarded data, IoT hub also sends out all of its internal data for analysis by Defender for IoT. This data includes device-cloud operation logs, device identities, and hub configuration. All of this information helps to create the Defender for IoT analytics pipeline.
-
-## Analytics pipeline
-
-The Defender for IoT analytics pipeline also receives other threat intelligence streams from various sources within Microsoft and Microsoft partners. The entire analytics pipeline works with every customer configuration made on the service, such as custom alerts and use of the send security message SDK.
-
-Using the analytics pipeline, Defender for IoT combines all streams of information to generate actionable recommendations and alerts. The pipeline contains both custom rules created by security researchers and experts, as well as   machine learning models searching for deviation from standard device behavior, and risk analysis.
-
-
-:::image type="content" source="media/overview/micro-agent-architecture.png" alt-text="The micro agent architecture.":::
+:::image type="content" source="media/overview/micro-agent-architecture.png" alt-text="Diagram of the micro agent architecture." lightbox="media/overview/micro-agent-architecture.png":::
 
 ## Next steps
 
 [Review the agent portfolio](concept-agent-portfolio-overview-os-support.md)
+
diff --git a/articles/defender-for-iot/device-builders/release-notes.md b/articles/defender-for-iot/device-builders/release-notes.md
@@ -14,6 +14,11 @@ This article lists new features and feature enhancements in Microsoft Defender f
 Noted features are in PREVIEW. The [Azure Preview Supplemental Terms](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) include other legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
 
 For more information, see [Upgrade the Microsoft Defender for IoT micro agent](upgrade-micro-agent.md).
+## September 2022
+
+**Micro agent GA announcement**
+
+Azure Defender for IoT micro agent is now generally available.
 
 ## July 2022
 
diff --git a/articles/defender-for-iot/device-builders/troubleshoot-defender-micro-agent.md b/articles/defender-for-iot/device-builders/troubleshoot-defender-micro-agent.md
@@ -1,11 +1,11 @@
 ---
-title: Defender for IoT micro agent troubleshooting (Preview)
+title: Defender for IoT micro agent troubleshooting 
 description: Learn how to handle unexpected or unexplained errors.
 ms.date: 11/09/2021
 ms.topic: reference
 ---
 
-# Defender for IoT micro agent troubleshooting (Preview)
+# Defender for IoT micro agent troubleshooting
 
 If an unexpected error occurs, you can use these troubleshooting methods in an attempt to resolve the issue. 
 
diff --git a/articles/defender-for-iot/device-builders/tutorial-configure-agent-based-solution.md b/articles/defender-for-iot/device-builders/tutorial-configure-agent-based-solution.md
@@ -26,9 +26,9 @@ In this tutorial you'll learn how to:
 
 - You must have [added a resource group to your IoT solution](quickstart-configure-your-solution.md)
 
-- You must have [created a Defender for IoT micro agent module twin (Preview)](quickstart-create-micro-agent-module-twin.md).
+- You must have [created a Defender for IoT micro agent module twin](quickstart-create-micro-agent-module-twin.md).
 
-- You must have [installed the Defender for IoT micro agent (Preview)](quickstart-standalone-agent-binary-installation.md)
+- You must have [installed the Defender for IoT micro agent](quickstart-standalone-agent-binary-installation.md)
 
 ## Enable data collection
 
diff --git a/articles/defender-for-iot/device-builders/tutorial-configure-your-solution.md b/articles/defender-for-iot/device-builders/tutorial-configure-your-solution.md
@@ -56,4 +56,4 @@ Defender for IoT will now monitor your newly added resource groups, and surfaces
 Advance to the next article to learn how to create Defender-IoT-micro-agent.
 
 > [!div class="nextstepaction"]
-> [Create a Defender for IoT micro agent module twin (Preview)](tutorial-create-micro-agent-module-twin.md)
+> [Create a Defender for IoT micro agent module twin](tutorial-create-micro-agent-module-twin.md)
diff --git a/articles/defender-for-iot/device-builders/tutorial-create-micro-agent-module-twin.md b/articles/defender-for-iot/device-builders/tutorial-create-micro-agent-module-twin.md
diff --git a/articles/defender-for-iot/device-builders/tutorial-investigate-security-alerts.md b/articles/defender-for-iot/device-builders/tutorial-investigate-security-alerts.md
diff --git a/articles/defender-for-iot/device-builders/tutorial-investigate-security-recommendations.md b/articles/defender-for-iot/device-builders/tutorial-investigate-security-recommendations.md
diff --git a/articles/defender-for-iot/device-builders/tutorial-standalone-agent-binary-installation.md b/articles/defender-for-iot/device-builders/tutorial-standalone-agent-binary-installation.md
diff --git a/articles/defender-for-iot/device-builders/upgrade-micro-agent.md b/articles/defender-for-iot/device-builders/upgrade-micro-agent.md
