Merge branch 'main' into docs-editor/supported-capabilities-by-plat-1742293828

Author: diannegali

CloudAppSecurityDocs/activity-filters-queries.md

@@ -35,7 +35,7 @@ Below is a list of the activity filters that can be applied. Most filters suppor
 - Administrative activity – Search only for administrative activities.
 
   >[!NOTE]
-  > Defender for Cloud Apps can't mark Google Cloud Platform (GCP) administrative activities as administrative activities.
+  > Defender for Cloud Apps classifies all GCP activities as administrative activities.
 
 - Alert ID - Search by alert ID.
 

defender-business/mdb-faq.yml

@@ -10,7 +10,7 @@ metadata:
   ms.topic: faq
   ms.service: defender-business
   ms.localizationpriority: medium
-  ms.date: 01/02/2024
+  ms.date: 03/19/2024
   ms.reviewer: efratka, nehabha
   f1.keywords: NOCSH
   ms.collection:
@@ -157,7 +157,7 @@ sections:
           | Cross-platform support <br/>(Mac, iOS, Android)| ✔ | ✔ | ✔ |
           | Windows Server and Linux Server <br/>(requires server licenses) | ✔  | ✔ | ✔ |
           | Microsoft Threat Experts | | | ✔ |
-          | Microsoft 365 Lighthouse <br/>(optimized; for CSPs only) | ✔ | | |
+          | Microsoft 365 Lighthouse <br/>(optimized; for CSPs only) | ✔ | ✔ | ✔ |
           | Microsoft Defender multi-tenant management | ✔ | ✔ | ✔ |
           | APIs | ✔  | ✔ | ✔ |
 

defender-xdr/media/eval-defender-xdr/defender-investigate-respond-pilot-deploy-steps.svg

@@ -93,13 +93,9 @@ The different tags have equivalent filters that assist you in efficiently review
 
 The Microsoft Threat Intelligence team adds threat tags to each threat report. The following threat tags are currently available:
   - Ransomware
-  - Extortion
   - Phishing
-  - Hands on keyboard
   - Activity group
   - Vulnerability
-  - Attack campaign
-  - Tool or technique
 
 Threat tags are presented at the top of the threat analytics page. There are counters for the number of available reports under each tag.