Skip to content

Commit 47880e0

Browse files
authored
Merge pull request #2690 from MicrosoftDocs/main
Published main to live, Friday 5:00 PM IST, 02/07
2 parents 11f8738 + 1ca5d0b commit 47880e0

6 files changed

+9
-8
lines changed

defender-xdr/defender-experts-report.md

Lines changed: 8 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ ms.collection:
1919
- tier1
2020
- essentials-manage
2121
ms.topic: conceptual
22-
ms.date: 10/30/2024
22+
ms.date: 02/07/2025
2323
---
2424

2525
# Understand the Defender Experts for Hunting report in Microsoft Defender XDR
@@ -38,15 +38,15 @@ To view the report in your Microsoft Defender portal, go to **Reports**, select
3838

3939
Refer to the following screenshot of a sample report:
4040

41-
![Screenshot of a Defender Experts for Hunting report.](/defender/media/defender-experts/defender-experts-hunting-report.png)
41+
:::image type="content" source="media/defender-experts-hunting-report.png" alt-text="Screenshot of Defender Experts for hunting report." lightbox="media/defender-experts-hunting-report.png":::
4242

4343
## Identify prevalent threats and other potential attack entry points
4444

4545
Signals from Microsoft Defender XDR and investigations by Defender Experts for Hunting help identify suspicious activities in your environment. Significant threat activities will have corresponding [Defender Experts Notifications](onboarding-defender-experts-for-hunting.md#receive-defender-experts-notifications), which also provide recommendations to remediate and defend your organization.
4646

4747
The report provides you with the total number of Defender Experts Notifications our experts have sent for your chosen period:
4848

49-
![Screenshot of the top section of the report showing the number of threats identified](/defender/media/defender-experts/report-top-section-dens.png)
49+
:::image type="content" source="media/report-top-section-dens.png" alt-text="Screenshot of the top section of the report showing the number of threats identified." lightbox="media/report-top-section-dens.png":::
5050

5151
To view these notifications, select **View Defender Experts Notifications**. This button redirects you to the Microsoft Defender XDR incidents page. Defender Expert for Hunting alerts or Defender Experts Notifications are labeled with **Defender Experts**.
5252

@@ -61,20 +61,21 @@ You can filter the activities displayed in the table by choosing any of the foll
6161
- **DEX notified** – Displays activities with corresponding Defender Expert Notifications only.
6262
- **All activities** – Displays all true positive, benign true positive, and false positive activities.
6363

64-
![Screenshot of the top section of the Threat categories section showing the dropdown menu.](/defender/media/defender-experts/threat-categories-filter.png)
64+
:::image type="content" source="/defender/media/defender-experts/threat-categories-filter.png" alt-text="Screenshot of the top section of the Threat categories section showing the dropdown menu." lightbox="/defender/media/defender-experts/threat-categories-filter.png":::
6565

6666
If an activity has a related Defender Expert Notification, its corresponding icon also appears under the activity name.
67-
Selecting an identified suspicious activity opens a flyout panel detailing the impacted devices and users:
6867

69-
![Screenshot of a flyout panel displaying a list of devices impacted by a detected suspicious activity.](/defender/media/defender-experts/suspicious-activity-detail-panel.png)
68+
Selecting an identified suspicious activity opens a flyout panel detailing the impacted devices and users:
69+
70+
:::image type="content" source="media/suspicious-activity-detail-panel.png" alt-text="Screenshot of a flyout panel displaying a list of devices impacted by a detected suspicious activity." lightbox="media/suspicious-activity-detail-panel.png":::
7071

7172
If applicable, the page also provides links to view related Defender Expert Notifications.
7273

7374
## Know and understand the security weak spots in your environment
7475

7576
The **Top trending suspicious activities** section of the report identifies up to 20 suspicious activities that were consistently observed in your environment in the last three months, sorted based on their severity rating and frequency of occurrence:
7677

77-
![Screenshot of the Top trending suspicious activities section of the report.](/defender/media/defender-experts/top-trending-suspicious-activities.png)
78+
:::image type="content" source="/defender/media/defender-experts/top-trending-suspicious-activities.png" alt-text="Screenshot of the Top trending suspicious activities section of the report." lightbox="/defender/media/defender-experts/top-trending-suspicious-activities.png":::
7879

7980
By showing the most critical and frequently observed activities, you can assess and evaluate their impact and develop strategies to prevent or mitigate potential threats to your environment
8081

780 KB
Loading
-58.1 KB
Loading
160 KB
Loading
276 KB
Loading

defender-xdr/reports-xdr.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ ms.custom:
1717
- cx-ti
1818
- cx-dex
1919
search.appverid: met150
20-
ms.date: 10/30/2024
20+
ms.date: 01/31/2025
2121
---
2222

2323
# Get real-time visibility with Defender Experts for XDR reports

0 commit comments

Comments
 (0)