Merge pull request #1248 from MicrosoftDocs/main

publish main to live 10:30 AM 9/29/24

Author: American-Dipper

defender-endpoint/ios-configure-features.md

@@ -14,7 +14,7 @@ ms.collection:
 ms.topic: conceptual
 ms.subservice: ios
 search.appverid: met150
-ms.date: 07/22/2024
+ms.date: 08/29/2024
 ---
 
 # Configure Microsoft Defender for Endpoint on iOS features
@@ -102,7 +102,7 @@ Use the following steps to disable web protection for unenrolled devices.
 
 ## Configure network protection
 
-Network protection in Microsoft Defender for endpoint is disabled by default. Admins can use the following steps to configure network protection. This configuration is available for both enrolled devices through MDM config and unenrolled devices through MAM config.
+Network protection in Microsoft Defender for endpoint is enabled by default. Admins can use the following steps to configure network protection. This configuration is available for both enrolled devices through MDM config and unenrolled devices through MAM config.
 
 > [!NOTE]
 > Only one policy should be created for network Protection, either through MDM or MAM. Network protection initialization requires the end user to open the app once.

defender-endpoint/threat-analytics.md

@@ -211,6 +211,8 @@ When looking at the threat analytics data, remember the following factors:
 - The checklist in the **Recommended actions** tab only displays recommendations tracked in [Microsoft Secure Score](/defender-xdr/microsoft-secure-score). Check the **Analyst report** tab for more recommended actions that aren't tracked in Secure Score.
 - The recommended actions don’t guarantee complete resilience and only reflect the best possible actions needed to improve it.
 - Antivirus-related statistics are based on Microsoft Defender Antivirus settings. 
+- The **Misconfigured devices** column in the main Threat analytics page shows the number of devices affected by a threat when the threat's related recommended actions aren't turned on. However, if Microsoft researchers don't link any recommended actions, the **Misconfigured devices** column shows the status *Not available*.  
+- The **Vulnerable devices** column in the main Threat analytics page shows the number of devices running software that are vulnerable to any of the vulnerabilities linked to the threat. However, if Microsoft researchers don't link any vulnerabilities, the **Vulnerable devices** column shows the status *Not available*.
 
 ## See also
 

defender-xdr/data-privacy.md

@@ -1,6 +1,6 @@
 ---
 title: Data retention and data security in Microsoft Defender XDR
-description: Describes the privacy and data security of the service.
+description: Describes data retention, security, and privacy of the service.
 ms.service: defender-xdr
 f1.keywords: 
   - NOCSH
@@ -20,7 +20,8 @@ search.appverid:
   - MOE150
   - MET150
 ms.date: 08/19/2024
-appliesto: Microsoft Defender XDR
+appliesto: 
+- Microsoft Defender XDR 
 ---
 
 # Data security and retention in Microsoft Defender XDR

defender-xdr/threat-analytics.md

@@ -209,7 +209,8 @@ When looking at the threat analytics data, remember the following factors:
 - The checklist in the **Recommended actions** tab only displays recommendations tracked in [Microsoft Secure Score](microsoft-secure-score.md). Check the **Analyst report** tab for more recommended actions that aren't tracked in Secure Score.
 - The recommended actions don’t guarantee complete resilience and only reflect the best possible actions needed to improve it.
 - Antivirus-related statistics are based on Microsoft Defender Antivirus settings. 
-
+- The **Misconfigured devices** column in the main Threat analytics page shows the number of devices affected by a threat when the threat's related recommended actions aren't turned on. However, if Microsoft researchers don't link any recommended actions, the **Misconfigured devices** column shows the status *Not available*.  
+- The **Vulnerable devices** column in the main Threat analytics page shows the number of devices running software that are vulnerable to any of the vulnerabilities linked to the threat. However, if Microsoft researchers don't link any vulnerabilities, the **Vulnerable devices** column shows the status *Not available*.
 
 ## See also