Merge branch 'main' into diannegali-activaterbacupdate

diannegali · web-flow · commit 8dddfb7d258f · 2024-11-18T13:34:20.000Z
diff --git a/exposure-management/TOC.yml b/exposure-management/TOC.yml
@@ -1,4 +1,4 @@
-- name: Microsoft Security Exposure Management (preview)
+- name: Microsoft Security Exposure Management
   href: index.yml
   expanded: true
   items: 
@@ -66,10 +66,9 @@
           href: exposure-insights-overview.md
         - name: Review security initiatives
           href: initiatives.md
-        - name: Investigate security metrics
         - name: Security initiatives catalog
           href: initiatives-list.md
-        - name: Investigate initiative metrics
+        - name: Investigate security initiative metrics
           href: security-metrics.md
         - name: Review security recommendations
           href: security-recommendations.md
diff --git a/exposure-management/classify-critical-assets.md b/exposure-management/classify-critical-assets.md
@@ -6,17 +6,13 @@ author: dlanger
 manager: rayne-wiselman
 ms.topic: overview
 ms.service: exposure-management
-ms.date: 08/20/2024
+ms.date: 11/04/2024
 ---
 
 # Review and classify critical assets
 
 [Microsoft Security Exposure Management](microsoft-security-exposure-management.md) helps keep your business critical assets secure and available. This article describes how to work with critical assets.
 
-Security Exposure Management is currently in public preview.
-
-[!INCLUDE [prerelease](../includes//prerelease.md)]
-
 ## Prerequisites
 
 - Before you start, learn about [critical asset management](critical-asset-management.md) in Security Exposure Management.
diff --git a/exposure-management/compare-secure-score-security-exposure-management.md b/exposure-management/compare-secure-score-security-exposure-management.md
@@ -6,17 +6,13 @@ author: dlanger
 manager: rayne-wiselman
 ms.topic: overview
 ms.service: exposure-management
-ms.date: 08/20/2024
+ms.date: 11/04/2024
 ---
 
 # Compare Microsoft Security Exposure Management with secure score
 
 This article discusses the differences between Microsoft [Secure Score](/defender-xdr/microsoft-secure-score) and [Microsoft Security Exposure Management](microsoft-security-exposure-management.md).
 
-Security Exposure Management is currently in public preview.
-
-[!INCLUDE [prerelease](../includes//prerelease.md)]
-
 ## Comparison
 
 **Area** | **Security Exposure Management** | **Secure Score**
diff --git a/exposure-management/critical-asset-management.md b/exposure-management/critical-asset-management.md
@@ -6,7 +6,7 @@ author: dlanger
 manager: rayne-wiselman
 ms.topic: overview
 ms.service: exposure-management
-ms.date: 08/20/2024
+ms.date: 11/04/2024
 ---
 
 # Overview of critical asset management
@@ -16,10 +16,6 @@ In [Microsoft Security Exposure Management](microsoft-security-exposure-manageme
 - Identifying critical assets helps ensure that the most important assets in your organization are protected against risk of data breaches and operational disruptions. Critical asset identification contributes to availability and business continuity.
 - You can prioritize security investigations, posture recommendations, and remediation steps to focus on critical assets first.
 
-Security Exposure Management is currently in public preview.
-
-[!INCLUDE [prerelease](../includes//prerelease.md)]
-
 ## Predefined classifications
 
 Security Exposure Management provides an out-of-the-box catalog of predefined critical asset classifications for assets that include devices, identities, and cloud resources. Predefined classifications include:
diff --git a/exposure-management/cross-workload-attack-surfaces.md b/exposure-management/cross-workload-attack-surfaces.md
@@ -6,17 +6,13 @@ author: dlanger
 manager: rayne-wiselman
 ms.topic: overview
 ms.service: exposure-management
-ms.date: 08/20/2024
+ms.date: 11/04/2024
 ---
 
 # Overview of attack surface management
 
 [Microsoft Security Exposure Management](microsoft-security-exposure-management.md) helps you to visualize, analyze, and remediate cross-workload attack surfaces.
 
-Security Exposure Management is currently in public preview.
-
-[!INCLUDE [prerelease](../includes//prerelease.md)]
-
 ## Enterprise exposure graph
 
 The enterprise exposure graph is the central tool for exploring and managing attack surfaces. The graph gathers information about assets, users, workloads, and more, from across your enterprise to provide a unified, comprehensive view of your organizational security posture.
diff --git a/exposure-management/enterprise-exposure-map.md b/exposure-management/enterprise-exposure-map.md
@@ -6,17 +6,14 @@ author: dlanger
 manager: rayne-wiselman
 ms.topic: overview
 ms.service: exposure-management
-ms.date: 11/13/2024
+ms.date: 11/18/2024
+
 ---
 
 # Explore with the attack surface map
 
 To visualize exposure data, use the attack surface map in [Microsoft Security Exposure Management](microsoft-security-exposure-management.md), together with the enterprise exposure graph schema.
 
-Security Exposure Management is currently in public preview.
-
-[!INCLUDE [prerelease](../includes//prerelease.md)]
-
 ## Prerequisites
 
 - [Read about](cross-workload-attack-surfaces.md) attack surface management.
diff --git a/exposure-management/exposure-insights-overview.md b/exposure-management/exposure-insights-overview.md
@@ -13,10 +13,6 @@ ms.date: 11/04/2024
 
 Exposure insights in [Microsoft Security Exposure Management](microsoft-security-exposure-management.md) continuously aggregate security posture data and insights across workloads and resources, into a single pipeline.
 
-Security Exposure Management is currently in public preview.
-
-[!INCLUDE [prerelease](../includes//prerelease.md)]
-
 ## Exposure insights
 
 Exposure insights provide rich context around the security posture state of your asset inventory.
@@ -38,7 +34,7 @@ Security initiatives provide a simple way to assess security readiness for a spe
 Security Exposure Management provides initiatives that currently include:
 
 - **Workload initiatives**: Assess and manage the risk associated with specific workload domains, such as security for endpoints, identity resources, and cloud assets.
-- **Horizontal threat initiatives**: Assess and manage risk for specific threat areas, such as ransomware protection, or financial fraud.
+- **Horizontal threat initiatives**: Assess and manage risk for specific threat areas, such as ransomware protection, or business email compromise - financial fraud.
 - **Threat analytics initiatives**: Assess threat risk  with initiatives that are based on up-to-date research from Microsoft threat analytics. Microsoft threat analytics is a set of reports from expert Microsoft security researchers that provide information about real and relevant threats. These threat initiatives focus on:
 
   - Threat actors and threat vectors.
diff --git a/exposure-management/get-started-exposure-management.md b/exposure-management/get-started-exposure-management.md
@@ -6,17 +6,13 @@ author: dlanger
 manager: rayne-wiselman
 ms.topic: overview
 ms.service: exposure-management
-ms.date: 06/24/2024
+ms.date: 11/04/2024
 ---
 
 # Start using Microsoft Security Exposure Management
 
 This article describes how to start working with the [Microsoft Security Exposure Management](microsoft-security-exposure-management.md) dashboard.
 
-Security Exposure Management is currently in public preview. Initially, your data uses default settings in Security Exposure Management.
-
-[!INCLUDE [prerelease](../includes//prerelease.md)]
-
 ## Reviewing security exposure state
 
 On the Exposure Management > **Overview** dashboard, you can review the overall state of your organizational security exposure.
diff --git a/exposure-management/index.yml b/exposure-management/index.yml
@@ -41,6 +41,8 @@ landingContent:
             url: get-started-exposure-management.md
           - text: Review prerequisites
             url: prerequisites.md
+          - text: Import data from external data connectors
+            url: overview-data-connectors.md  
 
 
   # Card
diff --git a/exposure-management/initiatives.md b/exposure-management/initiatives.md
@@ -6,17 +6,13 @@ author: dlanger
 manager: rayne-wiselman
 ms.topic: overview
 ms.service: exposure-management
-ms.date: 08/20/2024
+ms.date: 11/04/2024
 ---
 
 # Review security initiatives
 
 [Microsoft Security Exposure Management](microsoft-security-exposure-management.md) offers a focused, metric-driven way of tracking exposure in specific security areas using security initiatives. This article describes how to work with initiatives.
 
-Security Exposure Management is currently in public preview.
-
-[!INCLUDE [prerelease](../includes//prerelease.md)]
-
 ## Prerequisites
 
 - Learn about [initiatives](exposure-insights-overview.md#security-initiatives) before you start.
diff --git a/exposure-management/media/get-started-exposure-management/exposure-management-overview.png b/exposure-management/media/get-started-exposure-management/exposure-management-overview.png
diff --git a/exposure-management/microsoft-security-exposure-management.md b/exposure-management/microsoft-security-exposure-management.md
@@ -6,18 +6,14 @@ ms.author: dlanger
 manager: rayne-wiselman
 ms.topic: overview
 ms.service: exposure-management
-ms.date: 08/20/2024
+ms.date: 11/04/2024
 ---
 
 
 # What is Microsoft Security Exposure Management?
 
 Microsoft Security Exposure Management is a security solution that provides a unified view of security posture across company assets and workloads. Security Exposure Management enriches asset information with security context that helps you to proactively manage attack surfaces, protect critical assets, and explore and mitigate exposure risk.
 
-Security Exposure Management is currently in public preview.
-
-[!INCLUDE [prerelease](../includes//prerelease.md)]
-
 > [!NOTE]
 > Microsoft Security Exposure Management data and capabilities are currently unavailable in U.S Government clouds - GCC, GCC High and DoD.
 
@@ -77,6 +73,44 @@ Currently, Security Exposure Management consolidates security posture informatio
 In addition to Microsoft services, Security Exposure Management allows you to connect to external data sources to further enrich and extend your security posture management.
 For more information on data connectors, see [Data connectors overview](overview-data-connectors.md).
 
+## How do I buy Microsoft Security Exposure Management?
+
+Exposure Management is available in the Microsoft Defender portal at [https://security.microsoft.com](https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsecurity.microsoft.com%2F&data=05|02|dlanger@microsoft.com|535bfb9f198d4313d96108dd05e1a9d4|72f988bf86f141af91ab2d7cd011db47|1|0|638673189066169502|Unknown|TWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D|0|||&sdata=vOA7%2FeI4WU4tRMWSPiHTs4jrZX8%2B%2FN70wheiTBFPSDk%3D&reserved=0)
+
+Access to the exposure management blade and features in the Microsoft Defender portal is available with any of these licenses:
+
+- Microsoft 365 E5 o*r A5*
+- Microsoft 365 E3
+- Microsoft 365 E3 with the Microsoft Enterprise Mobility + Security E5 add-on
+- Microsoft 365 A3 with the Microsoft 365 A5 security add-on
+- Microsoft Enterprise Mobility + Security E5 or A5
+- Microsoft Defender for Endpoint (Plan 1 and 2)
+- Microsoft Defender for Identity
+- Microsoft Defender for Cloud Apps
+- Microsoft Defender for Office 365 (Plans 1 and 2)
+- Microsoft Defender Vulnerability Management
+
+Integration of data from the above tools and other Microsoft Security tools like Microsoft Defender for Cloud, Microsoft Defender Cloud Security Posture Management and Microsoft Defender External Attack Surface Management is available with those licenses.
+
+Integration of non-Microsoft security tools will be a consumption-based cost based on number of assets in the connected security tool. The external connectors are free during public preview, and pricing will be announced before starting to bill for external connectors at GA.
+
+### Data freshness, retention, and related functionality
+
+We currently ingest and process supported data from first-party Microsoft products, making it available within the enterprise exposure graph and applicable Microsoft Security Exposure Management experiences built on top of graph data within 72 hours of its production at the source product.
+
+Microsoft product data is retained for no less than 14 days in the enterprise exposure graph and/or Microsoft Security Exposure Management. Only the latest data snapshot received from Microsoft products is retained; we do not store historical data.
+
+Some enterprise exposure graph and/or Microsoft Security Exposure Management experiences data is available for querying via Advanced Hunting and is subject to [Advanced Hunting service limitations](https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Flearn.microsoft.com%2Fen-us%2Fdefender-xdr%2Fadvanced-hunting-limits&data=05|02|dlanger@microsoft.com|2eeaacf0c0f2494a51a308dd06ea1a99|72f988bf86f141af91ab2d7cd011db47|1|0|638674324732464247|Unknown|TWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D|0|||&sdata=cPz7p6NX%2BvUWkVwR4Wx0%2F5pJ0wbP6h8ZXsFSa4JrLxA%3D&reserved=0).
+
+We reserve the right to modify some or all of these parameters in the future, including:
+
+- Data ingestion frequency and freshness: We may increase the current 72-hour latency (decrease the frequency of data ingestion) for some or all Microsoft data sources.
+- Data retention period: We may decrease the current 14-day data retention period.
+- Service features and functionality: We may alter, limit, or discontinue specific features, capabilities, or functionalities of the service built on top of the enterprise exposure graph and/or Microsoft Security Exposure Management data.
+- Data query limits: We may impose limitations on the number, frequency, or type of data queries that can be performed against enterprise exposure graph or Microsoft Security Exposure Management data.
+
+ We will make reasonable efforts to provide advance notice of any significant changes to the service. However, you acknowledge and agree that you are solely responsible for monitoring any such notifications.
+
 ## Next steps
 
 Review [prerequisites](prerequisites.md) to get started with Security Exposure Management.
diff --git a/exposure-management/prerequisites.md b/exposure-management/prerequisites.md
@@ -6,17 +6,14 @@ author: dlanger
 manager: rayne-wiselman
 ms.topic: overview
 ms.service: exposure-management
-ms.date: 11/11/2024
+ms.date: 11/18/2024
+
 ---
 
 # Prerequisites and support
 
 This article describes the requirements and prerequisites for using Microsoft Security Exposure Management.
 
-Security Exposure Management is currently in public preview.
-
-[!INCLUDE [prerelease](../includes/prerelease.md)]
-
 ## Permissions
 
 > [!IMPORTANT]
diff --git a/exposure-management/query-enterprise-exposure-graph.md b/exposure-management/query-enterprise-exposure-graph.md
@@ -6,7 +6,7 @@ ms.author: dlanger
 manager: rayne-wiselman
 ms.topic: overview
 ms.service: exposure-management
-ms.date: 08/20/2024
+ms.date: 11/04/2024
 ---
 
 # Query the enterprise exposure graph
@@ -15,10 +15,6 @@ Use the enterprise exposure graph in [Microsoft Security Exposure Management](mi
 
 This article provides some examples, tips, and hints for constructing queries in the enterprise exposure graph.
 
-Security Exposure Management is currently in public preview.
-
-[!INCLUDE [prerelease](../includes//prerelease.md)]
-
 ## Prerequisites
 
 - [Read about](cross-workload-attack-surfaces.md) attack surface management.
diff --git a/exposure-management/review-attack-paths.md b/exposure-management/review-attack-paths.md
@@ -6,17 +6,13 @@ author: dlanger
 manager: rayne-wiselman
 ms.topic: overview
 ms.service: exposure-management
-ms.date: 08/20/2024
+ms.date: 11/04/2024
 ---
 
 # Review attack paths
 
 Attack paths in [Microsoft Security Exposure Management](microsoft-security-exposure-management.md) help you to proactively identify and visualize potential routes that attackers can exploit using vulnerabilities, gaps, and misconfigurations. Simulated attack paths allow you to proactively investigate and remediate potential threats.
 
-Security Exposure Management is currently in public preview.
-
-[!INCLUDE [prerelease](../includes/prerelease.md)]
-
 ## Prerequisites
 
 - [Read about attack paths](work-attack-paths-overview.md) before you start.
diff --git a/exposure-management/schemas-operators.md b/exposure-management/schemas-operators.md
@@ -6,17 +6,13 @@ author: dlanger
 manager: rayne-wiselman
 ms.topic: overview
 ms.service: exposure-management
-ms.date: 08/20/2024
+ms.date: 11/04/2024
 ---
 
 # Schemas and operators overview
 
 [Enterprise exposure graph schemas](cross-workload-attack-surfaces.md#enterprise-exposure-graph-schemas) in Microsoft Security Exposure Management provide attack surface information, to help you understand how potential threats might reach, and compromise, valuable assets. This article summarizes the exposure graph schema tables and operators.
 
-Security Exposure Management is currently in public preview.
-
-[!INCLUDE [prerelease](../includes//prerelease.md)]
-
 ## Schema tables
 
 The exposure graph relies on the following tables:
diff --git a/exposure-management/security-events.md b/exposure-management/security-events.md
@@ -6,17 +6,13 @@ author: dlanger
 manager: rayne-wiselman
 ms.topic: overview
 ms.service: exposure-management
-ms.date: 08/20/2024
+ms.date: 11/04/2024
 ---
 
 # Explore security events
 
 Security events in [Microsoft Security Exposure Management](microsoft-security-exposure-management.md)  track initiative and metric score drop incidents in order to determine how they affect organizational security posture.
 
-Security Exposure Management is currently in public preview.
-
-[!INCLUDE [prerelease](../includes//prerelease.md)]
-
 ## Prerequisites
 
 [Learn about](exposure-insights-overview.md#reviewing-events) security events.
diff --git a/exposure-management/security-metrics.md b/exposure-management/security-metrics.md
@@ -6,7 +6,8 @@ author: dlanger
 manager: rayne-wiselman
 ms.topic: overview
 ms.service: exposure-management
-ms.date: 11/13/2024
+ms.date: 11/18/2024
+
 ---
 
 # Investigate security initiative metrics
diff --git a/exposure-management/security-recommendations.md b/exposure-management/security-recommendations.md
@@ -6,17 +6,13 @@ author: dlanger
 manager: rayne-wiselman
 ms.topic: overview
 ms.service: exposure-management
-ms.date: 08/20/2024
+ms.date: 11/04/2024
 ---
 
 # Review security recommendations
 
 This article describes how to work with security recommendations in [Microsoft Security Exposure Management](microsoft-security-exposure-management.md).
 
-Security Exposure Management is currently in public preview.
-
-[!INCLUDE [prerelease](../includes//prerelease.md)]
-
 ## Prerequisites
 
 - Learn about the [recommendations catalog](exposure-insights-overview.md#working-with-recommendations) before you start.
diff --git a/exposure-management/whats-new.md b/exposure-management/whats-new.md
diff --git a/exposure-management/work-attack-paths-overview.md b/exposure-management/work-attack-paths-overview.md
