Skip to content

Commit 70d3838

Browse files
authored
Merge pull request #2082 from LiorShapiraa/docs-editor/investigate-assets-1733241639
Update investigate-assets.md
2 parents 33368e0 + e5a4516 commit 70d3838

File tree

2 files changed

+7
-1
lines changed

2 files changed

+7
-1
lines changed

ATPDocs/investigate-assets.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,9 @@ Find identity information in the following Microsoft Defender XDR areas:
4545

4646
For example, the following image shows the details on an identity details page:
4747

48-
:::image type="content" source="media/investigate-assets/identity-details.png" alt-text="Screenshot of an identity details page." lightbox="media/investigate-assets/identity-details.png":::
48+
![Screenshot of a specific user's page in the Microsoft Defender portal.](media/investigate-assets/image.png)
49+
50+
4951

5052
### Identity details
5153

@@ -60,6 +62,10 @@ When you investigate a specific identity, you'll see the following details on an
6062
|[Identity timeline](/microsoft-365/security/defender/investigate-users#timeline) | The timeline represents activities and alerts observed from a user's identity from the last 180 days, unifying identity entries across Microsoft Defender for Identity, Microsoft Defender for Cloud Apps, and Microsoft Defender for Endpoint. <br><br>Use the timeline to focus on activities a user performed or were performed on them in specific timeframes. Select the default **30 days** to change the time range to another built-in value, or to a custom range. |
6163
|[Remediation actions](/microsoft-365/security/defender/investigate-users#remediation-actions) | Respond to compromised users by disabling their accounts or resetting their password. After taking action on users, you can check on the activity details in the Microsoft Defender XDR **Action center.|
6264

65+
> [!NOTE]
66+
> **Investigation Priority Score** has been deprecated on December 3, 2025. As a result, both the Investigation Priority Score breakdown and the scored activity timeline cards have been removed from the UI.
67+
68+
6369
For more information, see [Investigate users](/microsoft-365/security/defender/investigate-users) in the Microsoft Defender XDR documentation.
6470

6571
## Investigation steps for suspicious groups
150 KB
Loading

0 commit comments

Comments
 (0)