Skip to content

Commit dbc430b

Browse files
Update understanding-dashboards.md
1 parent f885b0b commit dbc430b

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

articles/external-attack-surface-management/understanding-dashboards.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ Microsoft Excel enforces a character limit of 32,767 characters per cell. Some f
4545

4646
Your attack surface is constantly changing, which is why Defender EASM continuously analyzes and updates your inventory to ensure accuracy. Assets are frequently added and removed from inventory, so it's important to track these changes to understand your attack surface and identify key trends. The inventory changes dashboard provides an overview of these changes, displaying the "added" and "removed" counts for each asset type. You can filter the dashboard by two date ranges: either the last 7 or 30 days.
4747

48-
The "Changes by date" section provides more granular context on how your attack surface has changed on a daily basis. This section categorizes removals as "removed by user" or "removed by system." While a user removal requires manual action, system removals occur when Defender EASM determined that an asset is either no longer live or no longer owned by your organization. Assets are elible for pruning if they haven't been observed in a scan for 30-60 days, depending on the asset type. Assets that are manually added to inventory are not eligible for removal. From the "Changes by date" section, you can click on any listed value to see a full list of the assets that were added or removed.
48+
The "Changes by date" section provides more granular context on how your attack surface has changed on a daily basis. This section categorizes removals as "removed by user" or "removed by system." User removals include all manual removals, including individual, bulk or cascading asset state changes, as well as removals triggered by user-configured asset policies. System removals occur automatically. The system removes assets that are no longer relevant to your attack surface because recent scans no longer observed their connection to your inventory. Assets are elible for pruning if they haven't been observed in a scan for 30-60 days, depending on the asset type. Assets that are manually added to inventory are not eligible for removal. From the "Changes by date" section, you can click on any listed value to see a full list of the assets that were added or removed.
4949

5050
![Screenshot of Inventory changes dashboard with addition and removal counts.](media/inventory-changes-2.png)
5151

0 commit comments

Comments
 (0)