You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-xdr/onboarding-defender-experts-for-hunting.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -37,7 +37,7 @@ If you're new to Microsoft Defender XDR and Defender Experts for Hunting:
37
37
3. The Microsoft Defender XDR quick tour gets you familiar with the security suite, where the capabilities are and how important they are. Select **Take a quick tour**.
38
38
4. Read the short descriptions about what the Microsoft Defender Experts service is and the capabilities it provides. Select **Next**. You see the welcome page:
39
39
40
-

40
+

41
41
42
42
## Receive Defender Experts Notifications
43
43
@@ -50,7 +50,7 @@ The Defender Experts Notifications service includes:
50
50
51
51
Refer to the following screenshot to see a sample Defender Experts Notification:
52
52
53
-

53
+

54
54
55
55
### Where to find Defender Experts Notifications
56
56
@@ -66,7 +66,7 @@ You can receive Defender Experts Notifications from Defender Experts through the
66
66
67
67
You can filter your incidents and alerts if you want to only see the Defender Experts Notifications among the many alerts. To do so:
68
68
69
-
1. On the navigation menu, go to **Incidents & alerts** > **Incidents** > select the  icon.
69
+
1. On the navigation menu, go to **Incidents & alerts** > **Incidents** > select the  icon.
70
70
2. Scroll down to **Service/detection sources** then select the **Microsoft Defender Experts** checkboxes under *Microsoft Defender for Endpoint* and *Microsoft Defender XDR*.
71
71
3. Select **Apply**.
72
72
@@ -86,15 +86,15 @@ You can generate a sample Defender Experts Notification to start experiencing th
86
86
87
87
A sample Defender Experts Notification shows up in your **Incidents** page with the title _Defender Experts: Test Notification from Microsoft Defender Experts_. The [contents](#receive-defender-experts-notifications) of the notification are placeholder texts, while the other elements such as alerts are randomly generated from events present in your tenant and aren't actually impacted.
88
88
89
-
:::image type="content" source="/defender/media/mte/defenderexperts/sample-den-dexh.png" alt-text="Screenshot of Sample DEN in Defender Experts for Hunting." lightbox="/defender/media/mte/defenderexperts/sample-den-dexh.png":::
89
+
:::image type="content" source="./media/onboarding-defender-experts-for-hunting/sample-den-dexh.png" alt-text="Screenshot of Sample DEN in Defender Experts for Hunting." lightbox="./media/onboarding-defender-experts-for-hunting/sample-den-dexh.png":::
90
90
91
91
**To generate a sample notification:**
92
92
93
93
1. In your Microsoft Defender XDR navigation pane, go to **Settings** > **Defender Experts** and then select **Sample notifications**.
94
94
2. Select **Generate a sample notification**. A green status message appears, confirming that your sample notification is ready for review.
95
95
3. Under **Recently generated Defender Experts Notification**, select a link from the list to view its corresponding generated sample notification. The most recent sample appears on the top of the list. Selecting a link redirects you to the **Incidents** page.
96
96
97
-
:::image type="content" source="/defender/media/mte/defenderexperts/sample-den-links-dexh.png" alt-text="Screenshot of Sample DEN links." lightbox="/defender/media/mte/defenderexperts/sample-den-links-dexh.png":::
97
+
:::image type="content" source="./media/onboarding-defender-experts-for-hunting/sample-den-links-dexh.png" alt-text="Screenshot of Sample DEN links." lightbox="./media/onboarding-defender-experts-for-hunting/sample-den-links-dexh.png":::
Copy file name to clipboardExpand all lines: defender-xdr/playbook-detecting-ransomware-m365-defender.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -53,7 +53,7 @@ Business operation disruptions are likely when responding to a ransomware attack
53
53
54
54
Here's the qualitative relationship of the impact of a ransomware attack and your time to respond for no detection vs. proactive detection and response.
55
55
56
-

56
+

57
57
58
58
### Proactive detection via common malware tools and techniques
0 commit comments