Merge branch 'main' into patch-3

padmagit77 · web-flow · commit 681b2bc53636 · 2024-10-30T18:44:49.000+05:30
diff --git a/defender-endpoint/endpoint-attack-notifications.md b/defender-endpoint/endpoint-attack-notifications.md
@@ -12,9 +12,10 @@ ms.collection:
 - m365-security
 - tier2
 ms.topic: conceptual
+ms.custom: cx-ean
 ms.subservice: edr
 search.appverid: met150
-ms.date: 08/15/2024
+ms.date: 10/30/2024
 ---
 
 # Endpoint Attack Notifications
diff --git a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md
@@ -12,9 +12,10 @@ ms.collection:
 - m365-security
 - tier2
 ms.topic: conceptual
+ms.custom: cx-ean
 ms.subservice: edr
 search.appverid: met150
-ms.date: 05/13/2024
+ms.date: 10/30/2024
 ---
 
 # Evaluate Microsoft Defender Antivirus using Microsoft Defender Endpoint Security Settings Management (Endpoint security policies)
diff --git a/defender-xdr/access-den-graph-api.md b/defender-xdr/access-den-graph-api.md
@@ -13,8 +13,9 @@ ms.collection:
   - m365-security
   - tier1
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 08/14/2024
+ms.date: 10/30/2024
 ---
 
 # Access incident notifications using Graph API
diff --git a/defender-xdr/additional-information-xdr.md b/defender-xdr/additional-information-xdr.md
@@ -16,8 +16,9 @@ ms.collection:
   - m365-security
   - tier1
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 11/10/2023
+ms.date: 10/30/2024
 ---
 
 # Important considerations for Microsoft Defender Experts for XDR
diff --git a/defender-xdr/advanced-hunting-behaviorentities-table.md b/defender-xdr/advanced-hunting-behaviorentities-table.md
@@ -20,7 +20,7 @@ ms.topic: reference
 ms.date: 12/29/2023
 ---
 
-# BehaviorEntities
+# BehaviorEntities (Preview)
 
 [!INCLUDE [Microsoft Defender XDR rebranding](../includes/microsoft-defender.md)]
 
@@ -32,6 +32,9 @@ The `BehaviorEntities` table in the [advanced hunting](advanced-hunting-overview
 > [!IMPORTANT]
 > Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
 
+> [!IMPORTANT]
+> Behaviors feature is now in preview. Have feedback to share? Fill out our [feedback form](https://forms.office.com/r/x0mX5hBkGu).
+
 Behaviors are a type of data in Microsoft Defender XDR based on one or more raw events. Behaviors provide contextual insight into events and can, but not necessarily, indicate malicious activity. [Read more about behaviors](/defender-cloud-apps/behaviors)
 
 For information on other tables in the advanced hunting schema, [see the advanced hunting reference](advanced-hunting-schema-tables.md).
diff --git a/defender-xdr/advanced-hunting-behaviorinfo-table.md b/defender-xdr/advanced-hunting-behaviorinfo-table.md
@@ -20,7 +20,7 @@ ms.topic: reference
 ms.date: 12/29/2023
 ---
 
-# BehaviorInfo
+# BehaviorInfo (Preview)
 
 [!INCLUDE [Microsoft Defender XDR rebranding](../includes/microsoft-defender.md)]
 
@@ -36,6 +36,9 @@ The `BehaviorInfo` table in the [advanced hunting](advanced-hunting-overview.md)
 > [!IMPORTANT]
 > Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
 
+> [!IMPORTANT]
+> Behaviors feature is now in preview. Have feedback to share? Fill out our [feedback form](https://forms.office.com/r/x0mX5hBkGu).
+
 Behaviors are a type of data in Microsoft Defender XDR based on one or more raw events. Behaviors provide contextual insight into events and can, but not necessarily, indicate malicious activity. [Read more about behaviors](/defender-cloud-apps/behaviors)
 
 For information on other tables in the advanced hunting schema, [see the advanced hunting reference](advanced-hunting-schema-tables.md).
diff --git a/defender-xdr/auditing.md b/defender-xdr/auditing.md
@@ -14,8 +14,9 @@ ms.collection:
   - tier1
   - essentials-manage
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 05/29/2023
+ms.date: 10/30/2024
 ---
 
 # Auditing
diff --git a/defender-xdr/before-you-begin-defender-experts.md b/defender-xdr/before-you-begin-defender-experts.md
@@ -15,6 +15,7 @@ ms.collection:
   - tier1
   - essentials-compliance
 ms.topic: conceptual
+ms.custom: cx-ean
 search.appverid: met150
 ms.date: 08/14/2024
 ---
diff --git a/defender-xdr/before-you-begin-xdr.md b/defender-xdr/before-you-begin-xdr.md
@@ -14,8 +14,9 @@ ms.collection:
   - tier1
   - essentials-compliance
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 06/19/2023
+ms.date: 10/31/2024
 ---
 
 # Before you begin
diff --git a/defender-xdr/defender-experts-for-hunting.md b/defender-xdr/defender-experts-for-hunting.md
@@ -15,7 +15,8 @@ ms.collection:
   - essentials-overview
 ms.topic: conceptual
 search.appverid: met150
-ms.date: 04/18/2024
+ms.custom: cx-ean
+ms.date: 10/30/2024
 ---
 
 # Microsoft Defender Experts for Hunting
diff --git a/defender-xdr/defender-experts-report.md b/defender-xdr/defender-experts-report.md
@@ -12,12 +12,13 @@ author: vpattnai
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro
+ms.custom: cx-dex
 ms.collection: 
 - m365-security 
 - tier1
 - essentials-manage
 ms.topic: conceptual
-ms.date: 08/14/2023
+ms.date: 10/30/2024
 ---
 
 # Understand the Defender Experts for Hunting report in Microsoft Defender XDR
diff --git a/defender-xdr/dex-xdr-overview.md b/defender-xdr/dex-xdr-overview.md
@@ -14,8 +14,9 @@ ms.collection:
   - tier1
   - essentials-overview
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 04/25/2024
+ms.date: 10/30/2024
 ---
 
 # Microsoft Defender Experts for XDR
diff --git a/defender-xdr/dex-xdr-permissions.md b/defender-xdr/dex-xdr-permissions.md
@@ -13,8 +13,9 @@ ms.collection:
   - m365-security
   - tier1
 ms.topic: conceptual
+ms.custom: dex-cx
 search.appverid: met150
-ms.date: 06/28/2024
+ms.date: 10/30/2024
 ---
 
 # How Microsoft Defender Experts for XDR permissions work
diff --git a/defender-xdr/experts-on-demand.md b/defender-xdr/experts-on-demand.md
@@ -10,6 +10,7 @@ ms.sitesec: library
 ms.pagetype: security
 ms.author: vpattnaik
 author: vpattnai
+ms.custom: cx-dex
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro
@@ -19,7 +20,7 @@ ms.collection:
   - essentials-manage
 ms.topic: conceptual
 search.appverid: met150
-ms.date: 10/16/2024
+ms.date: 10/31/2024
 ---
 
 # Collaborate with experts on demand
diff --git a/defender-xdr/faq-incident-notifications-xdr.md b/defender-xdr/faq-incident-notifications-xdr.md
@@ -13,8 +13,9 @@ ms.collection:
   - m365-security
   - tier1
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 04/29/2023
+ms.date: 10/30/2024
 ---
 
 # Understanding and managing Defender Experts for XDR incident updates
diff --git a/defender-xdr/faq-managed-response.md b/defender-xdr/faq-managed-response.md
@@ -13,8 +13,9 @@ ms.collection:
   - m365-security
   - tier1
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 08/01/2024
+ms.date: 10/31/2024
 ---
 
 # Understanding Managed response
diff --git a/defender-xdr/frequently-asked-questions.md b/defender-xdr/frequently-asked-questions.md
@@ -13,8 +13,9 @@ ms.collection:
   - m365-security
   - tier1
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 08/29/2023
+ms.date: 10/30/2024
 ---
 
 # General information on Defender Experts for XDR service
diff --git a/defender-xdr/get-started-xdr.md b/defender-xdr/get-started-xdr.md
@@ -14,8 +14,9 @@ ms.collection:
   - tier1
   - essentials-get-started
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 08/01/2024
+ms.date: 10/30/2024
 ---
 
 # Get started with Microsoft Defender Experts for XDR
diff --git a/defender-xdr/managed-detection-and-response-xdr.md b/defender-xdr/managed-detection-and-response-xdr.md
@@ -14,8 +14,9 @@ ms.collection:
   - tier1
   - essentials-manage
 ms.topic: conceptual
+ms.custom: cx-ean
 search.appverid: met150
-ms.date: 07/31/2024
+ms.date: 10/31/2024
 ---
 
 # Managed detection and response
diff --git a/defender-xdr/onboarding-defender-experts-for-hunting.md b/defender-xdr/onboarding-defender-experts-for-hunting.md
@@ -14,8 +14,9 @@ ms.collection:
   - tier1
   - essentials-get-started
 ms.topic: conceptual
+ms.custom: cx-ean
 search.appverid: met150
-ms.date: 04/18/2024
+ms.date: 10/30/2024
 ---
 
 # Start using Microsoft Defender Experts for Hunting
diff --git a/defender-xdr/reports-xdr.md b/defender-xdr/reports-xdr.md
@@ -14,8 +14,9 @@ ms.collection:
   - tier1
   - essentials-manage
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 05/28/2024
+ms.date: 10/30/2024
 ---
 
 # Get real-time visibility with Defender Experts for XDR reports
diff --git a/defender-xdr/teams-restrictions-dexapp.md b/defender-xdr/teams-restrictions-dexapp.md
@@ -14,8 +14,9 @@ ms.collection:
   - tier1
   - essentials-manage
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 06/27/2024
+ms.date: 10/31/2024
 ---
 
 # Troubleshooting issues with Microsoft Defender Experts app in Microsoft Teams
diff --git a/defender/threat-intelligence/analyst-insights.md b/defender/threat-intelligence/analyst-insights.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # Analyst insights
diff --git a/defender/threat-intelligence/data-sets.md b/defender/threat-intelligence/data-sets.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-concept
 - cx-ti
+- cx-mdti
 ---
 
 # Data sets
diff --git a/defender/threat-intelligence/gathering-threat-intelligence-and-infrastructure-chaining.md b/defender/threat-intelligence/gathering-threat-intelligence-and-infrastructure-chaining.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 
diff --git a/defender/threat-intelligence/gathering-vulnerability-intelligence.md b/defender/threat-intelligence/gathering-vulnerability-intelligence.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # Tutorial: Gathering vulnerability intelligence
diff --git a/defender/threat-intelligence/infrastructure-chaining.md b/defender/threat-intelligence/infrastructure-chaining.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # Infrastructure chaining
diff --git a/defender/threat-intelligence/learn-how-to-access-microsoft-defender-threat-intelligence-and-make-customizations-in-your-portal.md b/defender/threat-intelligence/learn-how-to-access-microsoft-defender-threat-intelligence-and-make-customizations-in-your-portal.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ms.collection: essentials-get-started
 ---
 
diff --git a/defender/threat-intelligence/reputation-scoring.md b/defender/threat-intelligence/reputation-scoring.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # Reputation scoring
diff --git a/defender/threat-intelligence/searching-and-pivoting.md b/defender/threat-intelligence/searching-and-pivoting.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # Searching and pivoting
diff --git a/defender/threat-intelligence/security-copilot-and-defender-threat-intelligence.md b/defender/threat-intelligence/security-copilot-and-defender-threat-intelligence.md
@@ -14,6 +14,7 @@ ms.collection:
   - magic-ai-copilot
 ms.custom:
 - cx-ti
+- cx-mdti
 ms.topic: conceptual
 ms.date: 10/18/2024
 ---
diff --git a/defender/threat-intelligence/sorting-filtering-and-downloading-data.md b/defender/threat-intelligence/sorting-filtering-and-downloading-data.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # Sorting, filtering, and downloading data
diff --git a/defender/threat-intelligence/using-copilot-threat-intelligence-defender-xdr.md b/defender/threat-intelligence/using-copilot-threat-intelligence-defender-xdr.md
@@ -14,6 +14,7 @@ ms.collection:
   - magic-ai-copilot
 ms.custom:
 - cx-ti
+- cx-mdti
 ms.topic: conceptual
 ms.date: 10/18/2024
 ---
diff --git a/defender/threat-intelligence/using-projects.md b/defender/threat-intelligence/using-projects.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # Using projects
diff --git a/defender/threat-intelligence/using-tags.md b/defender/threat-intelligence/using-tags.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # Using tags
diff --git a/defender/threat-intelligence/what-is-microsoft-defender-threat-intelligence-defender-ti.md b/defender/threat-intelligence/what-is-microsoft-defender-threat-intelligence-defender-ti.md
@@ -11,6 +11,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # What is Microsoft Defender Threat Intelligence (Defender TI)?
diff --git a/exposure-management/work-attack-paths-overview.md b/exposure-management/work-attack-paths-overview.md
@@ -25,6 +25,8 @@ Security Exposure Management is currently in public preview.
 Here's how Security Exposure Management helps you to identify and resolve attack paths.
 
 - **Attack path generation**: Security Exposure Management automatically generates attack paths based on the data collected across assets and workloads. It simulates attack scenarios, and identifies vulnerabilities and weaknesses that an attacker could exploit.
+  - The number of attack paths visible in the portal can fluctuate due to the dynamic nature of  IT environments. Our system dynamically generates attack paths based on the real-time conditions of each customer's environment. Changes such as the addition or removal of assets, updates to configurations, a user logging on or off from a machine, a user added or removed to a group, and the implementation of new network segmentation or security policies can all influence the number and types of attack paths identified. 
+  - This approach ensures that the security posture we provide is both accurate and reflective of the latest environment state, accommodating the agility required in today's IT environments.
 - **Attack path visibility**: The attack path graph view uses [enterprise exposure graph](cross-workload-attack-surfaces.md) data to visualize the attack path to understand how potential threats might unfold.
   - Hovering over each node and connector icon provides you with additional information about how the attack path is build. For instance, from an initial virtual machine containing TLS/SSL keys all the way to permissions to storage accounts.
   - The [enterprise exposure map](enterprise-exposure-map.md) extends how you can visualize attack paths. Along with other data, it shows you multiple attack paths and choke points, nodes that create bottlenecks in the graph or map where attack paths converge. It visualizes exposure data, allowing you to see what assets are at risk, and where to prioritize your focus.
