Merge pull request #2892 from MicrosoftDocs/main

pushing MDVM fixes live

Author: denisebmsft

defender-vulnerability-management/defender-vulnerability-management-faq.md

@@ -138,7 +138,7 @@ Windows authenticated scan will officially be deprecated on November 30, 2025. A
 
 ### What happens to my data after the product is deprecated?
 
-All user data is handled according to our [data storage and privacy policy](tvm-prerequisites.md#data-storage-and-privacy). We recommend that you export any important data before the deprecation date.
+All user data is handled according to our [Data storage and privacy](defender-vulnerability-management.md#data-storage-and-privacy). We recommend that you export any important data before the deprecation date.
 
 ### Will the product be replaced?
 

defender-vulnerability-management/defender-vulnerability-management.md

@@ -13,7 +13,7 @@ ms.collection:
 - essentials-overview
 search.appverid: met150
 audience: ITPro
-ms.date: 04/03/2024
+ms.date: 02/23/2025
 ---
 
 # What is Microsoft Defender Vulnerability Management
@@ -94,6 +94,10 @@ See the following articles for related Defender for Endpoint APIs:
 - [Vulnerability APIs](/defender-endpoint/api/vulnerability)
 - [List vulnerabilities by machine and software](/defender-endpoint/api/get-all-vulnerabilities-by-machines)
 
+## Data storage and privacy
+
+The same data security and privacy practices for Microsoft Defender for Endpoint apply to Microsoft Defender Vulnerability Management, for more information, see [Microsoft Defender for Endpoint data storage and privacy](/defender-endpoint/data-storage-privacy).
+
 ## Next steps
 
 - [Compare security features in Microsoft Defender Vulnerability Management](defender-vulnerability-management-capabilities.md)

defender-vulnerability-management/get-defender-vulnerability-management.md

@@ -14,36 +14,34 @@ ms.collection:
 - m365-security
 - tier1
 - essentials-get-started
-ms.date: 08/14/2023
+ms.date: 02/23/2025
 ---
 
 # Sign up for Microsoft Defender Vulnerability Management
 
 > [!NOTE]
-> Microsoft Defender Vulnerability Management isn't currently available to Microsoft Defender for Business customers.
-
-## Starting a trial
-
-> [!NOTE]
+> Microsoft Defender Vulnerability Management isn't currently available in [Microsoft Defender for Business](/defender-business/mdb-overview).
 > The Microsoft Defender Vulnerability Management trial isn't currently available to US Government customers using GCC High, and DoD.
-> 
 > For more information on purchase options available, see [Microsoft Defender Vulnerability Management](https://www.microsoft.com/security/business/threat-protection/microsoft-defender-vulnerability-management-pricing?msockid=17c438e9b0b8628c22d52cd3b1c763eb).
 
-Microsoft Defender Vulnerability Management is available as a standalone and as an add-on for Microsoft Defender for Endpoint Plan 2 customers.
+
+## Starting a trial
+
+Microsoft Defender Vulnerability Management is available as a standalone subscription or as an add-on for [Microsoft Defender for Endpoint Plan 2](/defender-endpoint/microsoft-defender-endpoint) customers.
 
 - If you're a new customer or an existing Defender for Endpoint P1 or Microsoft 365 E3 customer sign up to try the [Defender Vulnerability Management Standalone Trial](#try-defender-vulnerability-management-standalone)
 - If you already have Defender for Endpoint Plan 2, sign up to try the [Defender Vulnerability Management Add-on Trial](#try-defender-vulnerability-management-add-on-trial-for-defender-for-endpoint-plan-2-customers)
 
-> [!NOTE]
-> Trials will be available to customers using the New Commerce Experience (NCE) for a 30 day period. After the 30 day period customers will be able to purchase Microsoft Defender Vulnerability Management through NCE.
-
+Trials are available to customers using the New Commerce Experience (NCE) for a 30 day period. After the 30 day period customers are able to purchase Microsoft Defender Vulnerability Management through NCE.
 
 ## Required roles for starting the trial
 
 As a Global Administrator, you can start the trial or you can allow to users start the trial on behalf of your organization by enabling this option:
 
 1. In the Microsoft 365 admin center, go to **Settings** > **Org settings** > **Services** > **User owned apps and services**
+
 2. Check **Let users start trials on behalf of your organization**
+
 3. Select **Save**
 
 :::image type="content" source="/defender/media/defender-vulnerability-management/mdvm-user-starttrial.png" alt-text="Screenshot of Microsoft Defender Vulnerability Management user trial setting.":::
@@ -57,17 +55,19 @@ It can take a few hours for the changes to take effect. Once it does, return to
 
 ## Try Defender Vulnerability Management Standalone
 
-If you're a new customer or an existing Defender for Endpoint P1 or Microsoft 365 E3 customer, you will sign up to trial the **Defender Vulnerability Management Standalone trial**.
+If you're a new customer or an existing Defender for Endpoint P1 or Microsoft 365 E3 customer, you can sign up for the **Defender Vulnerability Management Standalone trial**.
 
 > [!IMPORTANT]
 > You must be logged into the tenant as a global administrator to perform this task.
 
 To sign up:
 
-1. Log in as a global admin to the tenant where the Defender Vulnerability Management Standalone trial service will be added.
-2. Visit [Microsoft Defender Vulnerability Management Trial](https://aka.ms/MdvmStandaloneStartTrial).
-3. Follow the prompts to sign in. This will differ depending on whether you already have a Microsoft 365 subscription or not.
-4. Once you have signed in, select the **Try now** button to confirm your order of the 90 day subscription of the Defender Vulnerability Management Standalone trial.
+1. Sign in to the [Microsoft Defender portal](https://security.microsoft.com) for the tenant where the Defender Vulnerability Management Standalone trial service will be added.
+
+2. Go to [Microsoft Defender Vulnerability Management Trial](https://aka.ms/MdvmStandaloneStartTrial), and follow the prompts.
+
+3. Select the **Try now** button to confirm your order of the 90 day subscription of the Defender Vulnerability Management Standalone trial.
+
 5. Select **Continue**. You'll now be directed to the Microsoft Defender portal.
 
 > [!NOTE]
@@ -78,8 +78,11 @@ To sign up:
 If you already have Defender for Endpoint Plan 2, sign up to the **Defender Vulnerability Management Add-on trial** to get access to the additional capabilities. To sign up:
 
 1. Visit [Microsoft Defender Vulnerability Management Add-on Trial](https://aka.ms/MdvmAddonStartTrial).
+
 2. Follow the prompts to sign in. This will differ depending on whether you already have a Microsoft 365 subscription or not.
+
 3. Once you have signed in, select the **Try now** button to confirm your order of the 90 day subscription of the Microsoft Defender Vulnerability Add-on trial.
+
 4. Select **Continue**. You'll now be directed to the Microsoft Defender portal.
 
 > [!NOTE]

defender-vulnerability-management/tvm-browser-extensions.md

@@ -1,5 +1,5 @@
 ---
-title: Browser extensions assessment
+title: Browser extensions assessment in Microsoft Defender Vulnerability Management
 description: Find out about the browsers extensions installed in your environment
 ms.service: defender-vuln-mgmt
 ms.pagetype: security
@@ -13,38 +13,33 @@ ms.collection:
   - Tier1
 ms.topic: conceptual
 search.appverid: met150
-ms.date: 10/24/2023
+ms.date: 02/23/2025
 ---
 
-# Browser extensions assessment
+# Browser extensions assessment in Microsoft Defender Vulnerability Management
 
 **Applies to:**
 
 - [Microsoft Defender Vulnerability Management](defender-vulnerability-management.md)
 - [Microsoft Defender XDR](/defender-xdr)
 - [Microsoft Defender for Servers Plan 2](/azure/defender-for-cloud/plan-defender-for-servers-select-plan)
 
-> [!NOTE]
-> To use this feature you'll require Microsoft Defender Vulnerability Management Standalone or if you're already a Microsoft Defender for Endpoint Plan 2 customer, the Defender Vulnerability Management add-on.
-
-A browser extension is a small software application that adds functionality to a web browser. Visibility into the browser extensions installed can help you ensure the safe usage of extensions in your organization.
-
-The **Browser extensions** page displays a list of the browser extensions installed across different browsers in your organization. Browser extension details are collected across all the users that exist on a specific browser. For each installed extension, per browser, you can see the devices it's installed on, the users who installed it and if it's turned on or off on a device.
+This browser extension is a small software application that adds functionality to a web browser for use with Microsoft Defender Vulnerability Management. This extension provides your security team with visibility into installed browser extensions to help ensure the safe usage of extensions in your organization.
 
-The information available will not only help you learn about the installed extensions, but it can help you make decisions on how you want to manage the extensions.
+The **Browser extensions** page displays a list of the browser extensions installed across different browsers in your organization. Browser extension details are collected across all the users that exist on a specific browser. For each installed extension, per browser, you can see the devices it's installed on, the users who installed it, and whether it's turned on or off on a device.
 
-> [!TIP]
-> Did you know you can try all the features in Microsoft Defender Vulnerability Management for free? Find out how to [sign up for a free trial](defender-vulnerability-management-trial.md).
+The information available helps your security team learn about the installed extensions, and use that information to make decisions on how you want to manage extensions.
 
 ## View your browser extensions
 
 1. Go to **Vulnerability management** \> **Inventories** in the [Microsoft Defender portal](https://security.microsoft.com).
+
 2. Select the **Browser extensions** tab.
 
 > [!NOTE]
-> Browser extension assessment is only available on Windows devices. Only extensions that exist in Edge, Chrome, and Firefox, will appear in browser extension list.
+> Browser extension assessment is only available on Windows devices. Only extensions that exist in Microsoft Edge, Chrome, and Firefox, appear in browser extension list.
 
-The **Browser extensions** page opens with a list of the browser extensions installed across your organization, including details on the extension name, browser, the number of devices the extension is installed on, and the number that have it turned on.
+The **Browser extensions** page opens with a list of the browser extensions installed across your organization, including details on the extension name, browser, the number of devices the extension is installed on, and the number of devices with the extensions turned on.
 
    :::image type="content" source="/defender/media/defender-vulnerability-management/browser_extensions.png" alt-text="Screenshot of the Browser extensions page" lightbox="/defender/media/defender-vulnerability-management/browser_extensions.png":::
 
@@ -56,7 +51,7 @@ Select a browser extension to open its flyout pane, where you can learn more abo
 
    :::image type="content" source="/defender/media/defender-vulnerability-management/browser_extensions_details.png" alt-text="Screenshot of the Browser extensions details pane" lightbox="/defender/media/defender-vulnerability-management/browser_extensions_details.png":::
 
-Where applicable, there will be a link available on this page to access the extension in the store it was installed from.
+Where applicable, there's a link available on this page to access the extension in the store it was installed from.
 
 ### Browser extension permissions
 
@@ -69,7 +64,7 @@ Select the **Permissions** tab, from the browser extension flyout pane, to see i
 The permission risk level generated is based on the type of access the permission is requesting. You can use this information to help make an informed decision on whether you want to allow or block this extension.
 
 > [!NOTE]
-> Risk is subjective, and it's up to each organization to determine the types of risk they are willing to take on.
+> Risk is subjective, and it's up to each organization to determine the types of risk they're willing to take on.
 
 Select a permission to see a further flyout with more information.
 
@@ -85,7 +80,7 @@ From here, you can search for a particular device the extension is installed on,
 
 Select the **Extensions versions** tab, from the browser extension flyout pane, to see information on the versions of the extension installed in your organization.
 
-  :::image type="content" source="/defender/media/defender-vulnerability-management/browser_extensions_versions.png" alt-text="Screenshot of the Browser extensions versions tab" lightbox="/defender/media/defender-vulnerability-management/browser_extensions_versions.png":::
+   :::image type="content" source="/defender/media/defender-vulnerability-management/browser_extensions_versions.png" alt-text="Screenshot of the Browser extensions versions tab" lightbox="/defender/media/defender-vulnerability-management/browser_extensions_versions.png":::
 
 ### View extensions users
 
@@ -98,6 +93,7 @@ Select the **Users** tab, from the browser extension flyout pane, to see a list
 You can also view a list of extensions installed on a device:
 
 1. Select the device from the **Installed devices** tab in the flyout panel and select **Open device page** or select the device directly from the **Device inventory** page.
+
 2. Select **Inventories** and then **Browser extensions** to see a list of extensions installed on that device.
 
    :::image type="content" source="/defender/media/defender-vulnerability-management/browser_extensions_devicepage.png" alt-text="Screenshot of the Browser extensions in the devices page" lightbox="/defender/media/defender-vulnerability-management/browser_extensions_devicepage.png":::

defender-vulnerability-management/tvm-dashboard-insights.md

@@ -13,7 +13,7 @@ ms.collection:
 ms.custom: admindeeplinkDEFENDER
 ms.topic: conceptual
 search.appverid: met150
-ms.date: 03/04/2022
+ms.date: 02/23/2025
 ---
 
 # Microsoft Defender Vulnerability Management dashboard
@@ -39,7 +39,7 @@ You can use Defender Vulnerability Management dashboard in the Microsoft Defende
 - Select exception options and track active exceptions
 
 > [!NOTE]
-> Devices that are not active in the last 30 days are not factored in on the data that reflects your organization's vulnerability management exposure score and Microsoft Secure Score for Devices.
+> Devices that aren't active in the last 30 days aren't factored in on the data that reflects your organization's vulnerability management exposure score and Microsoft Secure Score for Devices.
 
 Watch this video for a quick overview of what is in the Defender Vulnerability Management dashboard.
 
@@ -52,24 +52,20 @@ Watch this video for a quick overview of what is in the Defender Vulnerability M
 
 :::image type="content" source="/defender/media/defender-vulnerability-management/tvmdashboard.png" lightbox="/defender/media/tvmdashboard.png" alt-text="Defender Vulnerability Management dashboard ":::
 
-<br>
-
-****
-
 |Area|Description|
 |---|---|
 |**Selected device groups (#/#)**|Filter the vulnerability management data you want to see in the dashboard and cards by device groups. What you select in the filter applies throughout the  vulnerability management pages.|
 |[**Exposure score**](tvm-exposure-score.md)|See the current state of your organization's device exposure to threats and vulnerabilities. Several factors affect your organization's exposure score: weaknesses discovered in your devices, likelihood of your devices to be breached, value of the devices to your organization, and relevant alerts discovered with your devices. The goal is to lower the exposure score of your organization to be more secure. To reduce the score, you need to remediate the related security configuration issues listed in the security recommendations.|
-|[**Microsoft Secure Score for Devices**](tvm-microsoft-secure-score-devices.md)|See the security posture of the operating system, applications, network, accounts, and security controls of your organization. The goal is to remediate the related security configuration issues to increase your score for devices. Selecting the bars will take you to the **Security recommendation** page.|
+|[**Microsoft Secure Score for Devices**](tvm-microsoft-secure-score-devices.md)|See the security posture of the operating system, applications, network, accounts, and security controls of your organization. The goal is to remediate the related security configuration issues to increase your score for devices. Selecting the bars take you to the **Security recommendation** page.|
 |**Device exposure distribution**|See how many devices are exposed based on their exposure level. Select a section in the doughnut chart to go to the **Devices list** page and view the affected device names, exposure level, risk level, and other details such as domain, operating system platform, its health state, when it was last seen, and its tags.|
-|**Expiring certificates**|See how many certificates have expired or are due to expire in the next 30, 60 or 90 days.|
+|**Expiring certificates**|See how many certificates are expired or are due to expire in the next 30, 60 or 90 days.|
 |**Top security recommendations**|See the collated security recommendations that are sorted and prioritized based on your organization's risk exposure and the urgency that it requires. Select **Show more** to see the rest of the security recommendations in the list. Select **Show exceptions** for the list of recommendations that have an exception.|
 |**Top vulnerable software**|Get real-time visibility into your organization's software inventory with a stack-ranked list of vulnerable software installed on your network's devices and how they impact your organizational exposure score. Select an item for details or **Show more** to see the rest of the vulnerable software list in the **Software inventory** page.|
 |**Top remediation activities**|Track the remediation activities generated from the security recommendations. You can select each item on the list to see the details in the **Remediation** page or select **Show more** to view the rest of the remediation activities, and active exceptions.|
 |**Top exposed devices**|View exposed device names and their exposure level. Select a device name from the list to go to the device page where you can view the alerts, risks, incidents, security recommendations, installed software, and discovered vulnerabilities associated with the exposed devices. Select **Show more** to see the rest of the exposed devices list. From the devices list, you can manage tags, initiate automated investigations, initiate a live response session, collect an investigation package, run antivirus scan, restrict app execution, and isolate device.|
 |
 
-## Related topics
+## Related articles
 
 - [Exposure score](tvm-exposure-score.md)
 - [Microsoft Secure Score for Devices](tvm-microsoft-secure-score-devices.md)