Skip to content

Commit 65a4268

Browse files
authored
Merge branch 'main' into incident-overview-changes
2 parents 360e6d0 + 41da72f commit 65a4268

File tree

177 files changed

+351
-103
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

177 files changed

+351
-103
lines changed

ATPDocs/accounts-with-non-default-pgid.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,7 @@ ms.author: liorshapira
1010
ms.service: microsoft-defender-for-identity
1111
ms.topic: article
1212
ms.date: 10/05/2024
13+
ms.reviewer: LiorShapiraa
1314
---
1415

1516
# Security Assessment: Accounts with non-default Primary Group ID

ATPDocs/advanced-settings.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,7 @@ description: Learn how to configure the number of Microsoft Defender for Identit
44
ms.date: 02/11/2024
55
ms.topic: how-to
66
#CustomerIntent: As a Microsoft Defender for Identity customer, I want to reduce the number of false positives by adjusting thresholds for specific alerts.
7+
ms.reviewer: rlitinsky
78
---
89

910
# Adjust alert thresholds

ATPDocs/alerts-overview.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,7 @@ title: Security alerts
33
description: This article provides a list of the security alerts issued by Microsoft Defender for Identity.
44
ms.date: 03/23/2023
55
ms.topic: conceptual
6+
ms.reviewer: morRubin
67
---
78

89
# Security alerts in Microsoft Defender for Identity

ATPDocs/architecture.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,7 @@ description: Learn about the Microsoft Defender for Identity system architecture
44
ms.date: 09/14/2023
55
ms.topic: overview
66
#CustomerIntent: As a Defender for Identity user, I want to understand the relevant components and how they interact with the rest of my environment so that I can best use Defender for Identity features.
7+
ms.reviewer: morRubin
78
---
89

910
# Microsoft Defender for Identity architecture

ATPDocs/built-in-active-directory-guest-account-is-enabled.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,7 @@ ms.author: liorshapira
1010
ms.service: microsoft-defender-for-identity
1111
ms.topic: article
1212
ms.date: 10/05/2024
13+
ms.reviewer: LiorShapiraa
1314
---
1415

1516
# Security Assessment: Built-in Active Directory Guest account is enabled
@@ -27,11 +28,11 @@ The on-premises Guest account is a built-in, non-nominative account that allows
2728

2829
1. Take appropriate action on those accounts by **disabling** the account.
2930

30-
For example:
31+
For example:
3132

32-
![Screenshot showing guest account in AD.](media/built-in-active-directory-guest-account-is-enabled/guest-account.png)
33+
![Screenshot showing guest account in AD.](media/built-in-active-directory-guest-account-is-enabled/guest-account.png)
3334

34-
![Screenshot showing security report.](media/built-in-active-directory-guest-account-is-enabled/security-report.png)
35+
![Screenshot showing security report.](media/built-in-active-directory-guest-account-is-enabled/security-report.png)
3536

3637
## Next steps
3738

ATPDocs/cef-format-sa.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,7 @@ title: SIEM log reference
33
description: Provides samples of logs sent from Microsoft Defender for Identity to your SIEM.
44
ms.date: 09/22/2024
55
ms.topic: conceptual
6+
ms.reviewer: rlitinsky
67
---
78

89
# Microsoft Defender for Identity SIEM log reference

ATPDocs/change-password-domain-administrator-account.md

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,7 @@ ms.author: liorshapira
1010
ms.service: microsoft-defender-for-identity
1111
ms.topic: article
1212
ms.date: 10/05/2024
13+
ms.reviewer: LiorShapiraa
1314
---
1415

1516
# Security assessment: Change password of built-in domain Administrator account
@@ -28,9 +29,9 @@ Regularly updating the built-in Administrator account's password is essential du
2829

2930
1. Take appropriate action on those accounts by resetting their password.  
3031

31-
For example:
32+
For example:
3233

33-
![Screenshot showing the report on the portal.](media/change-password-domain-administrator-account/screenshot-of-report.png)
34+
![Screenshot showing the report on the portal.](media/change-password-domain-administrator-account/screenshot-of-report.png)
3435

3536
## Next steps
3637

ATPDocs/change-password-krbtgt-account.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,7 @@ ms.author: liorshapira
1010
ms.service: microsoft-defender-for-identity
1111
ms.topic: article
1212
ms.date: 10/06/2024
13+
ms.reviewer: LiorShapiraa
1314
---
1415

1516
# Security Assessment: Change password for krbtgt account

ATPDocs/change-password-microsoft-entra-seamless-single-sign-on.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,7 @@ ms.author: liorshapira
66
ms.service: microsoft-defender-for-identity
77
ms.topic: article
88
ms.date: 08/22/2024
9+
ms.reviewer: LiorShapiraa
910
---
1011

1112
# Security Assessment: Change password for Microsoft Entra seamless SSO account

ATPDocs/credential-access-alerts.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,7 @@ title: Credential access security alerts
33
description: This article explains Microsoft Defender for Identity alerts issued when credential access attacks are detected against your organization.
44
ms.date: 04/16/2023
55
ms.topic: conceptual
6+
ms.reviewer: morRubin
67
---
78

89
# Credential access alerts

0 commit comments

Comments
 (0)