Skip to content

Commit 990cbc5

Browse files
Update using-and-managing-discovery.md
Acrolinx fixes
1 parent 78c7c17 commit 990cbc5

File tree

1 file changed

+10
-10
lines changed

1 file changed

+10
-10
lines changed

articles/external-attack-surface-management/using-and-managing-discovery.md

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -18,19 +18,19 @@ Before you run a custom discovery, see the [What is discovery?](what-is-discover
1818

1919
## Accessing your automated attack surface
2020

21-
Microsoft has preemptively configured the attack surfaces of many organizations, mapping their initial attack surface by discovering infrastructure that’s connected to known assets. It is recommended that all users search for their organization’s attack surface before creating a custom attack surface and running additional discoveries. This enables users to quickly access their inventory as Defender EASM refreshes the data, adding additional assets and recent context to your Attack Surface.
21+
Microsoft has pre-emptively configured the attack surfaces of many organizations, mapping their initial attack surface by discovering infrastructure that’s connected to known assets. It's recommended that all users search for their organization’s attack surface before creating a custom attack surface and running other discoveries. This process enables users to quickly access their inventory as Defender EASM refreshes the data, adding additional assets and recent context to your Attack Surface.
2222

2323
When first accessing your Defender EASM instance, select “Getting Started” in the “General” section to search for your organization in the list of automated attack surfaces. Then select your organization from the list and click “Build my Attack Surface”.
2424

25-
:::image type="content" source="media/Discovery_1.png" alt-text="Screenshot of pre-configured attack surface selection screen.":::
25+
:::image type="content" source="media/Discovery_1.png" alt-text="Screenshot of preconfigured attack surface selection screen.":::
2626

27-
At this point, the discovery will be running in the background. If you selected a pre-configured Attack Surface from the list of available organizations, you will be redirected to the Dashboard Overview screen where you can view insights into your organization’s infrastructure in Preview Mode. Review these dashboard insights to become familiar with your Attack Surface as you wait for additional assets to be discovered and populated in your inventory. See the [Understanding dashboards](understanding-dashboards.md) article for more information on how to derive insights from these dashboards.
27+
At this point, the discovery runs in the background. If you selected a preconfigured Attack Surface from the list of available organizations, you will be redirected to the Dashboard Overview screen where you can view insights into your organization’s infrastructure in Preview Mode. Review these dashboard insights to become familiar with your Attack Surface as you wait for more assets to be discovered and populated in your inventory. See the [Understanding dashboards](understanding-dashboards.md) article for more information on how to derive insights from these dashboards.
2828

29-
If you notice any missing assets or have other entities to manage that may not be discovered through infrastructure clearly linked to your organization, you can elect to run customized discoveries to detect these outlier assets.
29+
If you notice any missing assets or have other entities to manage that may not be discovered through infrastructure that is clearly linked to your organization, elect to run customized discoveries to detect these outlier assets.
3030

3131
## Customizing discovery
3232

33-
Custom discoveries are ideal for organizations that require deeper visibility into infrastructure that may not be immediately linked to their primary seed assets. By submitting a larger list of known assets to operate as discovery seeds, the discovery engine will return a wider pool of assets. Custom discovery can also help organizations find disparate infrastructure that may relate to independent business units and acquired companies.
33+
Custom discoveries are ideal for organizations that require deeper visibility into infrastructure that may not be immediately linked to their primary seed assets. By submitting a larger list of known assets to operate as discovery seeds, the discovery engine returns a wider pool of assets. Custom discovery can also help organizations find disparate infrastructure that may relate to independent business units and acquired companies.
3434

3535
### Discovery groups
3636

@@ -60,17 +60,17 @@ Custom discoveries are organized into Discovery Groups. They are independent see
6060

6161
:::image type="content" source="media/Discovery_6.png" alt-text="Screenshot of pre-baked attack surface selection page, then output in seed list.":::
6262

63-
:::image type="content" source="media/Discovery_7.png" alt-text="Screenshot of pre-baked attack surface selection page..":::
63+
:::image type="content" source="media/Discovery_7.png" alt-text="Screenshot of pre-baked attack surface selection page.":::
6464

65-
Alternatively, users can manually input their seeds. Defender EASM accepts organization names, domains, IP blocks, hosts, email contacts, ASNs, and WhoIs organizations as seed values. You can also specify entities to exclude from asset discovery to ensure they are not added to your inventory if detected. For example, this is useful for organizations that have subsidiaries that will likely be connected to their central infrastructure, but do not belong to your organization.
65+
Alternatively, users can manually input their seeds. Defender EASM accepts organization names, domains, IP blocks, hosts, email contacts, ASNs, and WhoIs organizations as seed values. You can also specify entities to exclude from asset discovery to ensure they aren't added to your inventory if detected. For example, exclusions are useful for organizations that have subsidiaries that will likely be connected to their central infrastructure, but do not belong to your organization.
6666

6767
Once your seeds have been selected, select **Review + Create**.
6868

6969
5. Review your group information and seed list, then select **Create & Run**.
7070

7171
:::image type="content" source="media/Discovery_8.png" alt-text="Screenshot of review + create screen.":::
7272

73-
You will then be taken back to the main Discovery page that displays your Discovery Groups. Once your discovery run is complete, you will see new assets added to your Confirmed Inventory.
73+
You'll then be taken back to the main Discovery page that displays your Discovery Groups. Once your discovery run is complete, you'll see new assets added to your Approved Inventory.
7474

7575
### Viewing and editing discovery groups
7676

@@ -84,7 +84,7 @@ Click on any discovery group to view more information, edit the group, or immedi
8484

8585
The discovery group details page contains the run history for the group. Once expanded, this section displays key information about each discovery run that has been performed on the specific group of seeds. The Status column indicates whether the run is “In Progress”, “Complete,” or “Failed”. This section also includes “started” and “completed” timestamps and counts of the total number of assets versus new assets discovered.
8686

87-
Run history is organized by the seed assets scanned during the discovery run. To see a list of the applicable seeds, click “Details”. This opens a right-hand pane that lists all the seeds and exclusions by kind and name.
87+
Run history is organized by the seed assets scanned during the discovery run. To see a list of the applicable seeds, click “Details”. This action opens a right-hand pane that lists all the seeds and exclusions by kind and name.
8888

8989
:::image type="content" source="media/Discovery_10.png" alt-text="Screenshot of run history for disco group screen.":::
9090

@@ -100,7 +100,7 @@ The seed list view displays seed values with three columns: type, source name, a
100100

101101
### Exclusions
102102

103-
Similarly, you can click the “Exclusions” tab to see a list of entities that have been excluded from the discovery group. This means that these assets will not be used as discovery seeds or added to your inventory. It is important to note that exclusions only impact future discovery runs for an individual discovery group. The “type" field displays the category of the excluded entity. The source name is the value that was inputted in the appropriate type box when creating the discovery group. The final column shows a list of discovery groups where this exclusion is present; each value is clickable, taking you to the details page for that discovery group.
103+
Similarly, you can click the “Exclusions” tab to see a list of entities that have been excluded from the discovery group. This means that these assets will not be used as discovery seeds or added to your inventory. It's important to note that exclusions only impact future discovery runs for an individual discovery group. The “type" field displays the category of the excluded entity. The source name is the value that was inputted in the appropriate type box when creating the discovery group. The final column shows a list of discovery groups where this exclusion is present; each value is clickable, taking you to the details page for that discovery group.
104104

105105
## Next steps
106106

0 commit comments

Comments
 (0)