Merge branch 'main' into maccruz-quotaupdates

schmurky · web-flow · commit 7a8f50aa3b98 · 2024-10-30T15:21:43.000Z
diff --git a/defender-endpoint/endpoint-attack-notifications.md b/defender-endpoint/endpoint-attack-notifications.md
@@ -12,9 +12,10 @@ ms.collection:
 - m365-security
 - tier2
 ms.topic: conceptual
+ms.custom: cx-ean
 ms.subservice: edr
 search.appverid: met150
-ms.date: 08/15/2024
+ms.date: 10/30/2024
 ---
 
 # Endpoint Attack Notifications
diff --git a/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md b/defender-endpoint/evaluate-mda-using-mde-security-settings-management.md
@@ -12,9 +12,10 @@ ms.collection:
 - m365-security
 - tier2
 ms.topic: conceptual
+ms.custom: cx-ean
 ms.subservice: edr
 search.appverid: met150
-ms.date: 05/13/2024
+ms.date: 10/30/2024
 ---
 
 # Evaluate Microsoft Defender Antivirus using Microsoft Defender Endpoint Security Settings Management (Endpoint security policies)
diff --git a/defender-xdr/access-den-graph-api.md b/defender-xdr/access-den-graph-api.md
@@ -13,8 +13,9 @@ ms.collection:
   - m365-security
   - tier1
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 08/14/2024
+ms.date: 10/30/2024
 ---
 
 # Access incident notifications using Graph API
diff --git a/defender-xdr/additional-information-xdr.md b/defender-xdr/additional-information-xdr.md
@@ -16,8 +16,9 @@ ms.collection:
   - m365-security
   - tier1
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 11/10/2023
+ms.date: 10/30/2024
 ---
 
 # Important considerations for Microsoft Defender Experts for XDR
diff --git a/defender-xdr/advanced-hunting-behaviorentities-table.md b/defender-xdr/advanced-hunting-behaviorentities-table.md
@@ -20,7 +20,7 @@ ms.topic: reference
 ms.date: 12/29/2023
 ---
 
-# BehaviorEntities
+# BehaviorEntities (Preview)
 
 [!INCLUDE [Microsoft Defender XDR rebranding](../includes/microsoft-defender.md)]
 
@@ -32,6 +32,9 @@ The `BehaviorEntities` table in the [advanced hunting](advanced-hunting-overview
 > [!IMPORTANT]
 > Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
 
+> [!IMPORTANT]
+> Behaviors feature is now in preview. Have feedback to share? Fill out our [feedback form](https://forms.office.com/r/x0mX5hBkGu).
+
 Behaviors are a type of data in Microsoft Defender XDR based on one or more raw events. Behaviors provide contextual insight into events and can, but not necessarily, indicate malicious activity. [Read more about behaviors](/defender-cloud-apps/behaviors)
 
 For information on other tables in the advanced hunting schema, [see the advanced hunting reference](advanced-hunting-schema-tables.md).
diff --git a/defender-xdr/advanced-hunting-behaviorinfo-table.md b/defender-xdr/advanced-hunting-behaviorinfo-table.md
@@ -20,7 +20,7 @@ ms.topic: reference
 ms.date: 12/29/2023
 ---
 
-# BehaviorInfo
+# BehaviorInfo (Preview)
 
 [!INCLUDE [Microsoft Defender XDR rebranding](../includes/microsoft-defender.md)]
 
@@ -36,6 +36,9 @@ The `BehaviorInfo` table in the [advanced hunting](advanced-hunting-overview.md)
 > [!IMPORTANT]
 > Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
 
+> [!IMPORTANT]
+> Behaviors feature is now in preview. Have feedback to share? Fill out our [feedback form](https://forms.office.com/r/x0mX5hBkGu).
+
 Behaviors are a type of data in Microsoft Defender XDR based on one or more raw events. Behaviors provide contextual insight into events and can, but not necessarily, indicate malicious activity. [Read more about behaviors](/defender-cloud-apps/behaviors)
 
 For information on other tables in the advanced hunting schema, [see the advanced hunting reference](advanced-hunting-schema-tables.md).
diff --git a/defender-xdr/advanced-hunting-schema-tables.md b/defender-xdr/advanced-hunting-schema-tables.md
@@ -57,8 +57,8 @@ The following reference lists all the tables in the schema. Each table name link
 | **[AADSpnSignInEventsBeta](advanced-hunting-aadspnsignineventsbeta-table.md)** | Microsoft Entra service principal and managed identity sign-ins |
 | **[AlertEvidence](advanced-hunting-alertevidence-table.md)** | Files, IP addresses, URLs, users, or devices associated with alerts |
 | **[AlertInfo](advanced-hunting-alertinfo-table.md)** | Alerts from Microsoft Defender for Endpoint, Microsoft Defender for Office 365, Microsoft Defender for Cloud Apps, and Microsoft Defender for Identity, including severity information and threat categorization  |
-| **[BehaviorEntities](advanced-hunting-behaviorentities-table.md)** | Behavior data types in Microsoft Defender for Cloud Apps |
-| **[BehaviorInfo](advanced-hunting-behaviorinfo-table.md)** | Alerts from Microsoft Defender for Cloud Apps |
+| **[BehaviorEntities](advanced-hunting-behaviorentities-table.md)** (Preview) | Behavior data types in Microsoft Defender for Cloud Apps |
+| **[BehaviorInfo](advanced-hunting-behaviorinfo-table.md)** (Preview) | Alerts from Microsoft Defender for Cloud Apps |
 | **[CloudAppEvents](advanced-hunting-cloudappevents-table.md)** | Events involving accounts and objects in Office 365 and other cloud apps and services |
 | **[DeviceEvents](advanced-hunting-deviceevents-table.md)** | Multiple event types, including events triggered by security controls such as Microsoft Defender Antivirus and exploit protection |
 | **[DeviceFileCertificateInfo](advanced-hunting-DeviceFileCertificateInfo-table.md)** | Certificate information of signed files obtained from certificate verification events on endpoints |
diff --git a/defender-xdr/auditing.md b/defender-xdr/auditing.md
@@ -14,8 +14,9 @@ ms.collection:
   - tier1
   - essentials-manage
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 05/29/2023
+ms.date: 10/30/2024
 ---
 
 # Auditing
diff --git a/defender-xdr/before-you-begin-defender-experts.md b/defender-xdr/before-you-begin-defender-experts.md
@@ -15,6 +15,7 @@ ms.collection:
   - tier1
   - essentials-compliance
 ms.topic: conceptual
+ms.custom: cx-ean
 search.appverid: met150
 ms.date: 08/14/2024
 ---
diff --git a/defender-xdr/before-you-begin-xdr.md b/defender-xdr/before-you-begin-xdr.md
@@ -14,8 +14,9 @@ ms.collection:
   - tier1
   - essentials-compliance
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 06/19/2023
+ms.date: 10/31/2024
 ---
 
 # Before you begin
diff --git a/defender-xdr/defender-experts-for-hunting.md b/defender-xdr/defender-experts-for-hunting.md
@@ -15,7 +15,8 @@ ms.collection:
   - essentials-overview
 ms.topic: conceptual
 search.appverid: met150
-ms.date: 04/18/2024
+ms.custom: cx-ean
+ms.date: 10/30/2024
 ---
 
 # Microsoft Defender Experts for Hunting
diff --git a/defender-xdr/defender-experts-report.md b/defender-xdr/defender-experts-report.md
@@ -12,12 +12,13 @@ author: vpattnai
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro
+ms.custom: cx-dex
 ms.collection: 
 - m365-security 
 - tier1
 - essentials-manage
 ms.topic: conceptual
-ms.date: 08/14/2023
+ms.date: 10/30/2024
 ---
 
 # Understand the Defender Experts for Hunting report in Microsoft Defender XDR
diff --git a/defender-xdr/dex-xdr-overview.md b/defender-xdr/dex-xdr-overview.md
@@ -14,8 +14,9 @@ ms.collection:
   - tier1
   - essentials-overview
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 04/25/2024
+ms.date: 10/30/2024
 ---
 
 # Microsoft Defender Experts for XDR
diff --git a/defender-xdr/dex-xdr-permissions.md b/defender-xdr/dex-xdr-permissions.md
@@ -13,8 +13,9 @@ ms.collection:
   - m365-security
   - tier1
 ms.topic: conceptual
+ms.custom: dex-cx
 search.appverid: met150
-ms.date: 06/28/2024
+ms.date: 10/30/2024
 ---
 
 # How Microsoft Defender Experts for XDR permissions work
diff --git a/defender-xdr/experts-on-demand.md b/defender-xdr/experts-on-demand.md
@@ -10,6 +10,7 @@ ms.sitesec: library
 ms.pagetype: security
 ms.author: vpattnaik
 author: vpattnai
+ms.custom: cx-dex
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro
@@ -19,7 +20,7 @@ ms.collection:
   - essentials-manage
 ms.topic: conceptual
 search.appverid: met150
-ms.date: 10/16/2024
+ms.date: 10/31/2024
 ---
 
 # Collaborate with experts on demand
diff --git a/defender-xdr/faq-incident-notifications-xdr.md b/defender-xdr/faq-incident-notifications-xdr.md
@@ -13,8 +13,9 @@ ms.collection:
   - m365-security
   - tier1
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 04/29/2023
+ms.date: 10/30/2024
 ---
 
 # Understanding and managing Defender Experts for XDR incident updates
diff --git a/defender-xdr/faq-managed-response.md b/defender-xdr/faq-managed-response.md
@@ -13,8 +13,9 @@ ms.collection:
   - m365-security
   - tier1
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 08/01/2024
+ms.date: 10/31/2024
 ---
 
 # Understanding Managed response
diff --git a/defender-xdr/frequently-asked-questions.md b/defender-xdr/frequently-asked-questions.md
@@ -13,8 +13,9 @@ ms.collection:
   - m365-security
   - tier1
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 08/29/2023
+ms.date: 10/30/2024
 ---
 
 # General information on Defender Experts for XDR service
diff --git a/defender-xdr/get-started-xdr.md b/defender-xdr/get-started-xdr.md
@@ -14,8 +14,9 @@ ms.collection:
   - tier1
   - essentials-get-started
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 08/01/2024
+ms.date: 10/30/2024
 ---
 
 # Get started with Microsoft Defender Experts for XDR
diff --git a/defender-xdr/managed-detection-and-response-xdr.md b/defender-xdr/managed-detection-and-response-xdr.md
@@ -14,8 +14,9 @@ ms.collection:
   - tier1
   - essentials-manage
 ms.topic: conceptual
+ms.custom: cx-ean
 search.appverid: met150
-ms.date: 07/31/2024
+ms.date: 10/31/2024
 ---
 
 # Managed detection and response
diff --git a/defender-xdr/onboarding-defender-experts-for-hunting.md b/defender-xdr/onboarding-defender-experts-for-hunting.md
@@ -14,8 +14,9 @@ ms.collection:
   - tier1
   - essentials-get-started
 ms.topic: conceptual
+ms.custom: cx-ean
 search.appverid: met150
-ms.date: 04/18/2024
+ms.date: 10/30/2024
 ---
 
 # Start using Microsoft Defender Experts for Hunting
diff --git a/defender-xdr/reports-xdr.md b/defender-xdr/reports-xdr.md
@@ -14,8 +14,9 @@ ms.collection:
   - tier1
   - essentials-manage
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 05/28/2024
+ms.date: 10/30/2024
 ---
 
 # Get real-time visibility with Defender Experts for XDR reports
diff --git a/defender-xdr/teams-restrictions-dexapp.md b/defender-xdr/teams-restrictions-dexapp.md
@@ -14,8 +14,9 @@ ms.collection:
   - tier1
   - essentials-manage
 ms.topic: conceptual
+ms.custom: cx-dex
 search.appverid: met150
-ms.date: 06/27/2024
+ms.date: 10/31/2024
 ---
 
 # Troubleshooting issues with Microsoft Defender Experts app in Microsoft Teams
diff --git a/defender/threat-intelligence/analyst-insights.md b/defender/threat-intelligence/analyst-insights.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # Analyst insights
diff --git a/defender/threat-intelligence/data-sets.md b/defender/threat-intelligence/data-sets.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-concept
 - cx-ti
+- cx-mdti
 ---
 
 # Data sets
diff --git a/defender/threat-intelligence/gathering-threat-intelligence-and-infrastructure-chaining.md b/defender/threat-intelligence/gathering-threat-intelligence-and-infrastructure-chaining.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 
diff --git a/defender/threat-intelligence/gathering-vulnerability-intelligence.md b/defender/threat-intelligence/gathering-vulnerability-intelligence.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # Tutorial: Gathering vulnerability intelligence
diff --git a/defender/threat-intelligence/infrastructure-chaining.md b/defender/threat-intelligence/infrastructure-chaining.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # Infrastructure chaining
diff --git a/defender/threat-intelligence/learn-how-to-access-microsoft-defender-threat-intelligence-and-make-customizations-in-your-portal.md b/defender/threat-intelligence/learn-how-to-access-microsoft-defender-threat-intelligence-and-make-customizations-in-your-portal.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ms.collection: essentials-get-started
 ---
 
diff --git a/defender/threat-intelligence/reputation-scoring.md b/defender/threat-intelligence/reputation-scoring.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # Reputation scoring
diff --git a/defender/threat-intelligence/searching-and-pivoting.md b/defender/threat-intelligence/searching-and-pivoting.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # Searching and pivoting
diff --git a/defender/threat-intelligence/security-copilot-and-defender-threat-intelligence.md b/defender/threat-intelligence/security-copilot-and-defender-threat-intelligence.md
@@ -14,6 +14,7 @@ ms.collection:
   - magic-ai-copilot
 ms.custom:
 - cx-ti
+- cx-mdti
 ms.topic: conceptual
 ms.date: 10/18/2024
 ---
diff --git a/defender/threat-intelligence/sorting-filtering-and-downloading-data.md b/defender/threat-intelligence/sorting-filtering-and-downloading-data.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # Sorting, filtering, and downloading data
diff --git a/defender/threat-intelligence/using-copilot-threat-intelligence-defender-xdr.md b/defender/threat-intelligence/using-copilot-threat-intelligence-defender-xdr.md
@@ -14,6 +14,7 @@ ms.collection:
   - magic-ai-copilot
 ms.custom:
 - cx-ti
+- cx-mdti
 ms.topic: conceptual
 ms.date: 10/18/2024
 ---
diff --git a/defender/threat-intelligence/using-projects.md b/defender/threat-intelligence/using-projects.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # Using projects
diff --git a/defender/threat-intelligence/using-tags.md b/defender/threat-intelligence/using-tags.md
@@ -10,6 +10,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # Using tags
diff --git a/defender/threat-intelligence/what-is-microsoft-defender-threat-intelligence-defender-ti.md b/defender/threat-intelligence/what-is-microsoft-defender-threat-intelligence-defender-ti.md
@@ -11,6 +11,7 @@ ms.date: 10/18/2024
 ms.custom: 
 - template-overview
 - cx-ti
+- cx-mdti
 ---
 
 # What is Microsoft Defender Threat Intelligence (Defender TI)?
diff --git a/exposure-management/exposure-insights-overview.md b/exposure-management/exposure-insights-overview.md
diff --git a/exposure-management/media/review-attack-paths/attack-path-list.png b/exposure-management/media/review-attack-paths/attack-path-list.png
diff --git a/exposure-management/media/review-attack-paths/choke points and blast radius.png b/exposure-management/media/review-attack-paths/choke points and blast radius.png
diff --git a/exposure-management/media/review-attack-paths/choke-points on map.png b/exposure-management/media/review-attack-paths/choke-points on map.png
diff --git a/exposure-management/media/work-attack-paths-overview/attack-paths-dashboard.png b/exposure-management/media/work-attack-paths-overview/attack-paths-dashboard.png
diff --git a/exposure-management/review-attack-paths.md b/exposure-management/review-attack-paths.md
diff --git a/exposure-management/whats-new.md b/exposure-management/whats-new.md
diff --git a/exposure-management/work-attack-paths-overview.md b/exposure-management/work-attack-paths-overview.md
