Merge branch 'main' into diannegali-aggregatedreports

Author: diannegali

defender-endpoint/TOC.yml

@@ -926,25 +926,21 @@
 
       - name: Troubleshooting Microsoft Defender Antivirus
         items:
-        - name: Troubleshoot Microsoft Defender Antivirus performance issues
-          items:
+        - name: Troubleshoot performance issues related to real-time protection
+          href: troubleshoot-performance-issues.md
+          items: 
           - name: Performance analyzer for Microsoft Defender Antivirus
             href: tune-performance-defender-antivirus.md
           - name: Performance analyzer reference
             href: performance-analyzer-reference.md
-            displayName: high cpu msmpeng.exe antimalware engine microsoft defender
-              antivirus windows defender antivirus
-          - name: Troubleshoot performance issues related to real-time protection
-            href: troubleshoot-performance-issues.md
-          - name: Troubleshoot Microsoft Defender Antivirus performance issues with WPRUI
-            href: troubleshoot-av-performance-issues-with-wprui.md
-            displayName: Troubleshoot antivirus performance issues with WPRUI windows
-              performance recorder UI WPR windows performance recorder
           - name: Troubleshoot Microsoft Defender Antivirus performance issues with Process
               Monitor
             href: troubleshoot-av-performance-issues-with-procmon.md
-            displayName: Troubleshoot Microsoft Defender Antivirus MDAV performance perf
-              issues with Process Monitor ProcMon
+          - name: Troubleshoot Microsoft Defender Antivirus performance issues with WPRUI
+            href: troubleshoot-av-performance-issues-with-wprui.md
+        - name: Troubleshoot Microsoft Defender Antivirus performance issues
+          items:
+          
         - name: Review event logs and error codes to troubleshoot issues with Microsoft Defender Antivirus
           href: troubleshoot-microsoft-defender-antivirus.yml
         - name: Troubleshoot Microsoft Defender Antivirus while migrating from a third-party solution

defender-office-365/mdo-threat-classification.md

@@ -16,7 +16,7 @@ ms.collection:
   - tier1
 description: Admins can learn about threat classification in Microsoft Defender for Office 365.
 ms.service: defender-office-365
-ms.date: 01/06/2025
+ms.date: 01/21/2025
 appliesto:
   - ✅ <a href="https://learn.microsoft.com/defender-office-365/mdo-about#defender-for-office-365-plan-1-vs-plan-2-cheat-sheet" target="_blank">Microsoft Defender for Office 365 Plan 1 and Plan 2</a>
   - ✅ <a href="https://learn.microsoft.com/defender-xdr/microsoft-365-defender" target="_blank">Microsoft Defender XDR</a>
@@ -84,3 +84,5 @@ The results of threat classification are available in the following experiences
 - [Explorer (Threat Explorer)](threat-explorer-real-time-detections-about.md)
 - [Incidents and alerts](mdo-sec-ops-manage-incidents-and-alerts.md)
 - [Advanced hunting](/defender-xdr/advanced-hunting-overview)
+- The [Threat protection status report](reports-email-security.md#view-data-by-email--phish-and-chart-breakdown-by-threat-classification-defender-for-office-365)
+- The [Mailflow status report](reports-email-security.md#mailflow-view-for-the-mailflow-status-report)

defender-vulnerability-management/tvm-security-baselines.md

@@ -12,7 +12,7 @@ ms.collection:
   - Tier1
 ms.topic: conceptual
 search.appverid: met150
-ms.date: 11/19/2024
+ms.date: 01/21/2025
 ---
 
 # Security baselines assessment
@@ -49,18 +49,21 @@ Security baselines provide support for Center for Internet Security (**CIS)** be
 4. On the **Baseline profile scope** page set the profile settings such as software, base benchmark (CIS or STIG), and the compliance level and select **Next**.
 5. Select the configurations you want to include in the profile.
 
-   :::image type="content" source="/defender/media/defender-vulnerability-management/add_configuration_settings.png" alt-text="Screenshot of the add configuration settings page" lightbox="/defender/media/defender-vulnerability-management/add_configuration_settings.png":::
+    :::image type="content" source="/defender/media/defender-vulnerability-management/add_configuration_settings.png" alt-text="Screenshot of the add configuration settings page" lightbox="/defender/media/defender-vulnerability-management/add_configuration_settings.png":::
 
-   Select **Customize** if you  want to change the threshold configuration value for your organization.
+    > [!NOTE]
+    > Some configurations might not be included in the baseline assessment due to manual checking requirement or the configurations are unsupported. These configurations are marked as needing **Manual check** in the list and these will not be automatically assessed for compliance.
 
-   :::image type="content" source="/defender/media/defender-vulnerability-management/baselines_customize_configuration.png" alt-text="Screenshot of the customize configuration settings page"  lightbox="/defender/media/defender-vulnerability-management/baselines_customize_configuration.png":::
+    Select **Customize** if you  want to change the threshold configuration value for your organization.
 
+    :::image type="content" source="/defender/media/defender-vulnerability-management/baselines_customize_configuration.png" alt-text="Screenshot of the customize configuration settings page"  lightbox="/defender/media/defender-vulnerability-management/baselines_customize_configuration.png":::
+  
 6. Select **Next** to choose the device groups and device tags you want to include in the baseline profile. The profile will be automatically applied to devices added to these groups in the future.
 7. Select **Next** to review the profile.
 8. Select **Submit** to create your profile.
 9. On the final page, select **View profile page** to see the assessment results.
 
-> [!NOTE]
+> [!TIP]
 > You can create multiple profiles for the same operating system with various customizations.
 
  When you customize a configuration an icon will appear beside it to indicate that it has been customized and is no longer using the recommended value. Select the **reset** button to revert to the recommended value.