Skip to content

Commit 808d7f1

Browse files
padmagit77padmagit77
authored
Merge pull request #2524 from MicrosoftDocs/main
Published main to live, Thursday 10:30 AM PST, 01/23
2 parents 1bb73a2 + 52acd42 commit 808d7f1

13 files changed

+119
-80
lines changed

‎defender-endpoint/api/export-firmware-hardware-assessment.md‎

Lines changed: 11 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.topic: reference
1515
ms.subservice: reference
1616
ms.custom: api
1717
search.appverid: met150
18-
ms.date: 01/08/2025
18+
ms.date: 01/22/2025
1919
---
2020

2121
# Export Hardware and firmware assessment inventory per device
@@ -153,12 +153,16 @@ Delegated (work or school account)|Software.Read|'Read Threat and Vulnerability
153153
GET /api/machines/HardwareFirmwareInventoryExport
154154
```
155155

156-
### 2.4 Properties (JSON response)
156+
### 2.4 Parameters
157+
158+
- `sasValidHours`: The number of hours that the download URLs are valid for. Maximum is 6 hours.
159+
160+
### 2.5 Properties (JSON response)
157161

158162
> [!NOTE]
159163
>
160-
> - The files are gzip compressed & in multiline Json format.
161-
> - The download URLs are only valid for 1 hour.
164+
> - The files are GZIP compressed & in multiline JSON format.
165+
> - The download URLs are valid for 6 hours.
162166
> - To maximize download speeds, make sure you are downloading the data from the same Azure region where your data resides.
163167
> - Each record is approximately 1KB of data. You should take this into account when choosing the pageSize parameter that works for you.
164168
> - Some additional columns might be returned in the response. These columns are temporary and might be removed. Only use the documented columns.
@@ -169,15 +173,15 @@ Property (ID)|Data type|Description
169173
|GeneratedTime|DateTime|The time the export was generated.
170174

171175

172-
## 2.5 Examples
176+
## 2.6 Examples
173177

174-
### 2.5.1 Request example
178+
### 2.6.1 Request example
175179

176180
```http
177181
GET https://api.security.microsoft.com/api/machines/HardwareFirmwareInventoryExport
178182
```
179183

180-
### 2.5.2 Response example
184+
### 2.6.2 Response example
181185

182186
```json
183187
{

‎defender-endpoint/api/export-security-baseline-assessment.md‎

Lines changed: 11 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.topic: reference
1515
ms.subservice: reference
1616
ms.custom: api
1717
search.appverid: met150
18-
ms.date: 01/08/2025
18+
ms.date: 01/22/2025
1919
---
2020

2121
# Export security baselines assessment per device
@@ -158,12 +158,16 @@ Returns all security baselines assessments for all devices, on a per-device basi
158158
GET /api/machines/BaselineComplianceAssessmentExport
159159
```
160160

161-
### 2.4 Properties (via files)
161+
### 2.4 Parameters
162+
163+
- `sasValidHours`: The number of hours that the download URLs are valid for. Maximum is 6 hours.
164+
165+
### 2.5 Properties (via files)
162166

163167
> [!NOTE]
164168
>
165-
> - The files are gzip compressed & in multiline Json format.
166-
> - The download URLs are only valid for 1 hours.
169+
> - The files are GZIP compressed & in multiline JSON format.
170+
> - The download URLs are valid for 6 hours.
167171
> - To maximize download speeds, make sure you are downloading the data from the same Azure region where your data resides.
168172
> - Some additional columns might be returned in the response. These columns are temporary and might be removed. Only use the documented columns.
169173

@@ -172,15 +176,15 @@ Property (ID)|Data type|Description
172176
|Export files|array[string]|A list of download URLs for files holding the current snapshot of the organization.
173177
|GeneratedTime|String|The time that the export was generated.
174178

175-
## 2.5 Examples
179+
## 2.6 Examples
176180

177-
### 2.5.1 Request example
181+
### 2.6.1 Request example
178182

179183
```http
180184
GET https://api.securitycenter.microsoft.com/api/machines/BaselineComplianceAssessmentExport
181185
```
182186

183-
### 2.5.2 Response example
187+
### 2.6.2 Response example
184188

185189
```json
186190
{

‎defender-endpoint/api/get-assessment-browser-extensions.md‎

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.topic: reference
1515
ms.subservice: reference
1616
ms.custom: api
1717
search.appverid: met150
18-
ms.date: 01/08/2025
18+
ms.date: 01/22/2025
1919
---
2020

2121
# Export browser extensions assessment per device
@@ -182,12 +182,16 @@ Delegated (work or school account)|Software.Read|'Read Threat and Vulnerability
182182
GET /api/machines/browserextensionsinventoryExport
183183
```
184184

185-
### 2.4 Properties
185+
### 2.4 Parameters
186+
187+
- `sasValidHours`: The number of hours that the download URLs are valid for. Maximum is 6 hours.
188+
189+
### 2.5 Properties
186190

187191
> [!NOTE]
188192
>
189-
> - The files are gzip compressed & in multiline JSON format.
190-
> - The download URLs are only valid for 1 hour.
193+
> - The files are GZIP compressed & in multiline JSON format.
194+
> - The download URLs are valid for 6 hours.
191195
> - For maximum download speed of your data, you can make sure you're downloading from the same Azure region that your data resides.
192196
193197
<br>

‎defender-endpoint/api/get-assessment-information-gathering.md‎

Lines changed: 11 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.topic: reference
1515
ms.subservice: reference
1616
ms.custom: api
1717
search.appverid: met150
18-
ms.date: 01/08/2025
18+
ms.date: 01/22/2025
1919
---
2020

2121
# Information gathering assessment per device
@@ -69,12 +69,16 @@ Delegated (work or school account)|Vulnerability.Read|\'Read Threat and Vulnerab
6969
GET /api/Machines/InfoGatheringExport
7070
```
7171

72-
### 1.4 Properties
72+
### 1.4 Parameters
73+
74+
- `sasValidHours`: The number of hours that the download URLs are valid for Maximum is 6 hours.
75+
76+
### 1.5 Properties
7377

7478
> [!NOTE]
7579
>
76-
> - The files are gzip compressed & in multiline Json format.
77-
> - The download URLs are only valid for 1 hour.
80+
> - The files are GZIP compressed & in multiline JSON format.
81+
> - The download URLs are valid for 6 hours.
7882
> - To maximize download speeds, make sure you are downloading the data from the same Azure region where your data resides.
7983
> - Some additional columns might be returned in the response. These columns are temporary and might be removed. Only use the documented columns.
8084
@@ -83,15 +87,15 @@ Property (ID)|Data type|Description
8387
|Export files|String[array]|A list of download URLs for files holding the current snapshot of the organization.
8488
|GeneratedTime|DateTime|The time the export was generated.
8589

86-
### 1.5 Examples
90+
### 1.6 Examples
8791

88-
#### 1.5.1 Request example
92+
#### 1.6.1 Request example
8993

9094
```http
9195
GET https://api.securitycenter.microsoft.com/api/machines/InfoGatheringExport?$sasValidHours=1
9296
```
9397

94-
#### 1.5.2 Response example
98+
#### 1.6.2 Response example
9599

96100
```json
97101
{

‎defender-endpoint/api/get-assessment-non-cpe-software-inventory.md‎

Lines changed: 11 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.topic: reference
1515
ms.subservice: reference
1616
ms.custom: api
1717
search.appverid: met150
18-
ms.date: 01/08/2025
18+
ms.date: 01/23/2025
1919
---
2020

2121
# Export non product code software inventory assessment per device
@@ -180,12 +180,16 @@ Delegated (work or school account)|Software.Read|\'Read Threat and Vulnerability
180180
GET /api/machines/SoftwareInventoryNonCpeExport
181181
```
182182

183-
### 2.4 Properties
183+
### 2.4 Parameters
184+
185+
- `sasValidHours`: The number of hours that the download URLs are valid for. Maximum is 6 hours.
186+
187+
### 2.5 Properties
184188

185189
> [!NOTE]
186190
>
187-
> - The files are gzip compressed & in multiline JSON format.
188-
> - The download URLs are only valid for 1 hour.
191+
> - The files are GZIP compressed & in multiline JSON format.
192+
> - The download URLs are valid for 6 hours.
189193
> - For maximum download speed of your data, you can make sure you're downloading from the same Azure region that your data resides.
190194
191195
<br>
@@ -198,15 +202,15 @@ Export files|array\[string\]|A list of download URLs for files holding the curre
198202
GeneratedTime|string|The time that the export was generated.|2021-05-20T08:00:00Z
199203
|
200204

201-
### 2.5 Examples
205+
### 2.6 Examples
202206

203-
#### 2.5.1 Request example
207+
#### 2.6.1 Request example
204208

205209
```http
206210
GET https://api.securitycenter.microsoft.com/api/machines/SoftwareInventoryNonCpeExport
207211
```
208212

209-
#### 2.5.2 Response example
213+
#### 2.6.2 Response example
210214

211215
```json
212216
{

‎defender-endpoint/api/get-assessment-secure-config.md‎

Lines changed: 10 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.topic: reference
1515
ms.subservice: reference
1616
ms.custom: api
1717
search.appverid: met150
18-
ms.date: 01/06/2025
18+
ms.date: 01/23/2025
1919
---
2020

2121
# Export secure configuration assessment per device
@@ -238,12 +238,16 @@ Delegated (work or school account)|Vulnerability.Read|\'Read Threat and Vulnerab
238238
GET /api/machines/SecureConfigurationsAssessmentExport
239239
```
240240

241-
### 2.4 Properties
241+
### 2.4 Parameters
242+
243+
- `sasValidHours`: The number of hours that the download URLs are valid for. Maximum is 6 hours.
244+
245+
### 2.5 Properties
242246

243247
> [!NOTE]
244248
>
245249
> - The files are GZIP compressed & in multiline JSON format.
246-
> - The download URLs are only valid for 1 hour.
250+
> - The download URLs are valid for 6 hours.
247251
> - For maximum download speed of your data, you can make sure you are downloading from the same Azure region in which your data resides.
248252
249253

@@ -257,15 +261,15 @@ Export files|array[string]|A list of download URLs for files holding the current
257261
GeneratedTime|string|The time that the export was generated.|2021-05-20T08:00:00Z
258262
|
259263

260-
### 2.5 Examples
264+
### 2.6 Examples
261265

262-
#### 2.5.1 Request example
266+
#### 2.6.1 Request example
263267

264268
```http
265269
GET https://api.securitycenter.microsoft.com/api/machines/SecureConfigurationsAssessmentExport
266270
```
267271

268-
#### 2.5.2 Response example
272+
#### 2.6.2 Response example
269273

270274
```json
271275
{

‎defender-endpoint/api/get-assessment-software-inventory.md‎

Lines changed: 11 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.topic: reference
1515
ms.subservice: reference
1616
ms.custom: api
1717
search.appverid: met150
18-
ms.date: 01/08/2025
18+
ms.date: 01/23/2025
1919
---
2020

2121
# Export software inventory assessment per device
@@ -236,12 +236,16 @@ Delegated (work or school account)|Software.Read|\'Read Threat and Vulnerability
236236
GET /api/machines/SoftwareInventoryExport
237237
```
238238

239-
### 2.4 Properties
239+
### 2.4 Parameters
240+
241+
- `sasValidHours`: The number of hours that the download URLs are valid for. Maximum is 6 hours.
242+
243+
### 2.5 Properties
240244

241245
> [!NOTE]
242246
>
243-
> - The files are gzip compressed & in multiline JSON format.
244-
> - The download URLs are only valid for 1 hour.
247+
> - The files are GZIP compressed & in multiline JSON format.
248+
> - The download URLs are valid for 6 hours.
245249
> - For maximum download speed of your data, you can make sure you're downloading from the same Azure region that your data resides.
246250
247251
<br>
@@ -254,15 +258,15 @@ Export files|array\[string\]|A list of download URLs for files holding the curre
254258
GeneratedTime|string|The time that the export was generated.|2021-05-20T08:00:00Z
255259
|
256260

257-
### 2.5 Examples
261+
### 2.6 Examples
258262

259-
#### 2.5.1 Request example
263+
#### 2.6.1 Request example
260264

261265
```http
262266
GET https://api.securitycenter.microsoft.com/api/machines/SoftwareInventoryExport
263267
```
264268

265-
#### 2.5.2 Response example
269+
#### 2.6.2 Response example
266270

267271
```json
268272
{

‎defender-endpoint/api/get-assessment-software-vulnerabilities.md‎

Lines changed: 11 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.topic: reference
1515
ms.subservice: reference
1616
ms.custom: api
1717
search.appverid: met150
18-
ms.date: 01/08/2025
18+
ms.date: 01/23/2025
1919
---
2020

2121
# Export software vulnerabilities assessment per device
@@ -288,12 +288,16 @@ Delegated (work or school account)|Vulnerability.Read|\'Read Threat and Vulnerab
288288
GET /api/machines/SoftwareVulnerabilitiesExport
289289
```
290290

291-
### 2.4 Properties
291+
### 2.4 Parameters
292+
293+
- `sasValidHours`: The number of hours that the download URLs are valid for. Maximum is 6 hours.
294+
295+
### 2.5 Properties
292296

293297
> [!NOTE]
294298
>
295-
> - The files are gzip compressed & in multiline Json format.
296-
> - The download URLs are only valid for 1 hour.
299+
> - The files are GZIP compressed & in multiline JSON format.
300+
> - The download URLs are valid for 6 hours.
297301
> - For maximum download speed of your data, you can make sure you're downloading from the same Azure region that your data resides.
298302
>
299303
> - Each record is approximately 1KB of data. You should take this into account when choosing the correct pageSize parameter for you.
@@ -309,15 +313,15 @@ Export files|array\[string\]|A list of download URLs for files holding the curre
309313
GeneratedTime|String|The time that the export was generated.|2021-05-20T08:00:00Z
310314
|
311315

312-
### 2.5 Examples
316+
### 2.6 Examples
313317

314-
#### 2.5.1 Request example
318+
#### 2.6.1 Request example
315319

316320
```http
317321
GET https://api-us.securitycenter.contoso.com/api/machines/SoftwareVulnerabilitiesExport
318322
```
319323

320-
#### 2.5.2 Response example
324+
#### 2.6.2 Response example
321325

322326
```json
323327
{

‎defender-endpoint/defender-endpoint-false-positives-negatives.md‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -212,9 +212,11 @@ To define exclusions across Microsoft Defender for Endpoint, perform the followi
212212

213213
- [Create "allow" indicators for Microsoft Defender for Endpoint](#indicators-for-defender-for-endpoint)
214214
- [Define exclusions for Microsoft Defender Antivirus](#exclusions-for-microsoft-defender-antivirus)
215+
- For Attack Surface Reduction Rule exclusions [Configure attack surface reduction per-rule exclusions](/defender-endpoint/attack-surface-reduction-rules-deployment-test#configure-attack-surface-reduction-per-rule-exclusions) or you can leverage [ASR rule only exclusions](/defender-endpoint/enable-attack-surface-reduction#exclude-files-and-folders-from-attack-surface-reduction-rules)
215216

216217
> [!NOTE]
217218
> Microsoft Defender Antivirus exclusions apply only to antivirus protection, not across other Microsoft Defender for Endpoint capabilities. To exclude files broadly, use [custom indicators](indicators-overview.md) for Microsoft Defender for Endpoint and exclusions for Microsoft Defender Antivirus.
219+
> ASR Rules can leverage ASR Rule Exclusions - where the exclusions apply to all ASR Rules; ASR per Rule Exclusions; Defender AV exclusions; as well as allow indicators defined in Custom Indicators.
218220

219221
The procedures in this section describe how to define indicators and exclusions.
220222

0 commit comments

Comments
 (0)