You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/external-attack-surface-management/index.md
+5Lines changed: 5 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -45,6 +45,11 @@ Customers can filter their inventory to surface the specific insights they care
45
45
46
46
47
47
48
+
## User permissions
49
+
50
+
Users that have been assigned either Owner or Contributor roles can create, delete, and edit Defender EASM resources and the inventory assets within it. These roles can utilize all capabilities offered in the platform. Users that have been assigned the Reader role are able to view Defender EASM data, but are unable to create, delete or edit inventory assets or the resource itself.
51
+
52
+
48
53
## Data residency, availability and privacy
49
54
50
55
Microsoft Defender External Attack Surface Management contains both global data and customer-specific data. The underlying internet data is global Microsoft data; labels applied by customers are considered customer data. All customer data is stored in the region of the customer’s choosing.
Copy file name to clipboardExpand all lines: articles/external-attack-surface-management/inventory-filters.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -19,14 +19,14 @@ Inventory filters allow users to access a specific subset of data that meets the
19
19
20
20
By default, the Inventory screen displays only Approved Inventory assets, hiding any assets in an alternative state. This filter can be removed if a user wishes to view assets in a different state (for instance: Candidate, Dependency, Requires Investigation). Removing the Approved Inventory filter is useful when a user needs to review potential new assets, investigate a third-party dependency issue or simply needs a complete view of all potential owned assets when conducting a search.
21
21
22
-
Defender EASM offers a wide variety of filters to obtain results of differing levels of granularity. Some filters will allow you to select value options from a dropdown, whereas others require the manual entry of the desired value.
22
+
Defender EASM offers a wide variety of filters to obtain results of differing levels of granularity. Some filters allow you to select value options from a dropdown, whereas others require the manual entry of the desired value.
23
23
24
24
25
25
26
26
27
27
## Operators
28
28
29
-
Inventory filters can be used with the following operators. Note that some operators are not available for every filter; some operators will be hidden if they are not logically applicable to the specific filter.
29
+
Inventory filters can be used with the following operators. Some operators are not available for every filter; some operators are hidden if they are not logically applicable to the specific filter.
@@ -37,7 +37,7 @@ Inventory filters can be used with the following operators. Note that some opera
37
37
|`Matches`| Returns results where a tokenized term in the field exactly matches the search value. |
38
38
|`Does not match`| Returns results where a tokenized term in the field does not exactly matches the search value. |
39
39
|`In`| Returns results where the field exactly matches one of the search values. For drop-down lists, multiple options can be selected. |
40
-
|`Not In`| Returns results where the field does not exactly match any of the search values. Multiple options can be selected, and manually inputted fields will exclude results that match an exact value. |
40
+
|`Not In`| Returns results where the field does not exactly match any of the search values. Multiple options can be selected, and manually inputted fields exclude results that match an exact value. |
41
41
|`Starts with in`| Returns results where the field starts with one of the search values. |
42
42
|`Does not start with in`| Returns results where the field does not start with any of the search values. |
43
43
|`Matches in`| Returns results where a tokenized term in the field exactly matches one of the search values. |
@@ -49,13 +49,12 @@ Inventory filters can be used with the following operators. Note that some opera
49
49
|`Empty`| Returns assets that do not return any value for the specified filter. |
50
50
|`Not Empty`| Returns all assets that return a value for the specified filter, regardless of the value. |
51
51
|`Greater Than or Equal To`| Returns results that are greater than or equal to a numerical value. This includes dates. |
52
-
|`Less Than or Equal To`| Returns results that are less than or equal to a numerical value. This includes dates. |
53
52
|`Between`| Returns results within a numerical range. This includes date ranges. |
54
53
55
54
56
55
## Common filters
57
56
58
-
These filters apply to all kinds of assets within inventory. These filters can be used when searching for a wider range of assets. For a list of filters for specific kinds of assets, please see the “Next steps” section.
57
+
These filters apply to all kinds of assets within inventory. These filters can be used when searching for a wider range of assets. For a list of filters for specific kinds of assets, see the “Next steps” section.
59
58
60
59
61
60
### Defined value filters
@@ -67,15 +66,16 @@ These filters apply to all kinds of assets within inventory. These filters can b
67
66
| State | The state assigned to assets to distinguish their relevance to your organization and how Defender EASM monitors them. | Approved, Candidate, Dependency, Monitor only, Requires investigation ||
68
67
| Removed from Inventory | The method with which an asset was removed from inventory. | Archived, Dismissed ||
69
68
| Created At | Filters by the date that an asset was created in your inventory. | Date range via calendar dropdown |`Greater Than or Equal To``Less Than or Equal To``Between`|
70
-
| First Seen | Filters by the date that an asset was first observed by the Defender EASM detection system. |||
71
-
| Last Seen | Filters by the date that an asset was last observed by the Defender EASM detection system. |||
72
-
| Updated At | Filters by the date that asset data was last updated in inventory. |||
69
+
| First Seen | Filters by the date that an asset was first observed by the Defender EASM detection system. | Date range via calendar dropdown ||||
70
+
| Last Seen | Filters by the date that an asset was last observed by the Defender EASM detection system. | Date range via calendar dropdown |||
71
+
| Labels | Filters for labels manually applied to inventory assets. | Accepts free-form responses, but also offers a dropdown of labels available in your Defender EASM resource. |
72
+
| Updated At | Filters by the date that asset data was last updated in inventory. | Date range via calendar dropdown |||
73
73
| Wildcard | A wildcard DNS record answers DNS requests for subdomains that have not already been defined. For example: *.contoso.com | True, False |`Equals``Not Equals`|
74
74
75
75
76
76
### Free form filters
77
77
78
-
The following filters require that the user manually enters the value with which they want to search. Note that many of these values are case-sensitive.
78
+
The following filters require that the user manually enters the value with which they want to search. Many of these values are case-sensitive.
79
79
80
80
| Filter name | Description | Value format | Applicable operators |
0 commit comments