Merge pull request #3170 from MicrosoftDocs/main

Published main to live, Tuesday 5:00 PM IST, 03/18

Author: padmagit77

ATPDocs/whats-new.md

@@ -24,6 +24,17 @@ For updates about versions and features released six months ago or earlier, see
 
 ## March 2025
 
+### Enhanced Identity Inventory (Preview)
+
+The Identities page under *Assets* has been updated to provide better visibility and management of identities across your environment.  
+The updated Identities Inventory page now includes the following tabs:
+
+- Identities: A consolidated view of identities across Active Directory, Entra ID. This Identities tab highlights key details, including identity types, and user's information. 
+
+- Cloud application accounts: Displays a list of cloud application accounts, including those from application connectors and third-party sources (original available in the previous version based on Microsoft Defender for Cloud Apps). 
+
+For more information, see [Identity inventory details](/defender-for-identity/identity-inventory). 
+
 ### New LDAP query events added to the IdentityQueryEvents table in Advanced Hunting
 New LDAP query events were added to the `IdentityQueryEvents` table in Advanced Hunting to provide more visibility into additional LDAP search queries running in the customer environment.
 

defender-vulnerability-management/tvm-security-baselines.md

@@ -8,11 +8,11 @@ ms.localizationpriority: medium
 manager: deniseb
 audience: ITPro
 ms.collection:
-  - m365-security
-  - Tier1
+- m365-security
+- Tier1
 ms.topic: conceptual
 search.appverid: met150
-ms.date: 01/21/2025
+ms.date: 03/18/2025
 ---
 
 # Security baselines assessment
@@ -167,26 +167,28 @@ If your benchmark version is not listed below and you're experiencing issues, pl
 The following CIS, Microsoft, and STIG benchmarks are affected:
 
 - **CIS**
-  - CIS 17.1.1 
-  - CIS 17.2.1 
+  - CIS 17.1.1 to 17.1.3
+  - CIS 17.2.1 to 17.2.6
   - CIS 17.3.1 to 17.3.2
+  - CIS 17.4.1 to 17.4.2
   - CIS 17.5.1 to 17.5.6
   - CIS 17.6.1 to 17.6.4 
   - CIS 17.7.1 to 17.7.5
   - CIS 17.8.1
   - CIS 17.9.1 to 17.9.5
 
 - **CIS Checks Additions**
+  - CIS 2.3.2.2
   - CIS 2.3.7.3 to 2.3.7.5
   - CIS 2.3.10.1
   - CIS 1.1.5
 
 - **Microsoft Checks**
-  - Microsoft 2.1
+  - Microsoft 2.1 to 2.9
   - Microsoft 2.10
-  - Microsoft 2.12 to 2.30
-  - Microsoft 2.33 to 2.37
-  - Microsoft 2.40 to 2.50
+  - Microsoft 2.12 to 2.21
+  - Microsoft 2.23 to 2.30
+  - Microsoft 2.33 to 2.52
   - Microsoft 3.55
   - Microsoft 3.57
   - Microsoft 3.60
@@ -214,19 +216,30 @@ The following CIS, Microsoft, and STIG benchmarks are affected:
   - MCS 2.0 for Windows Server 2016 Domain Controller 2.3.10.1
 
 - **STIG List**
-  - STIG SV-205678r569188
   - STIG SV-220746r569187
+  - STIG SV-220750r569187
+  - STIG SV-220750r851970
   - STIG SV-220754r569187
+  - STIG SV-220755r569187
   - STIG SV-220757r569187
   - STIG SV-220760r569187
   - STIG SV-220767r569187
   - STIG SV-220768r569187
   - STIG SV-220768r851975
+  - STIG SV-220769r569187
   - STIG SV-220775r569187
   - STIG SV-220775r851978
+  - STIG SV-220776r569187
+  - STIG SV-220776r851979
   - STIG SV-220786r569187
-  - STIG SV-220769r569187
+  - STIG SV-220789r569187
+  - STIG SV-220789r819664
+  - STIG SV-224873r569186
   - STIG SV-225273r569185
+  - STIG SV-225277r569185
+  - STIG SV-225277r852184
+  - STIG SV-225278r569185
+  - STIG SV-225278r852185
   - STIG SV-225281r569185
   - STIG SV-225284r569185
   - STIG SV-225287r569185
@@ -236,26 +249,50 @@ The following CIS, Microsoft, and STIG benchmarks are affected:
   - STIG SV-225295r569185
   - STIG SV-225302r569185
   - STIG SV-225302r852194
+  - STIG SV-225303r569185
+  - STIG SV-225303r852195
+  - STIG SV-226063r569184
+  - STIG SV-226063r794292
+  - STIG SV-226087r569184
+  - STIG SV-226087r794341
+  - STIG SV-226087r852064
+  - STIG SV-226088r569184
+  - STIG SV-226088r794342
+  - STIG SV-226088r852065
+  - STIG SV-226089r569184
+  - STIG SV-226089r794274
+  - STIG SV-226089r852066
   - STIG SV-226092r569184
   - STIG SV-226092r794343
+  - STIG SV-226096r569184
+  - STIG SV-226096r794784
+  - STIG SV-226096r852070
+  - STIG SV-226097r569184
+  - STIG SV-226097r794786
+  - STIG SV-226097r852071
   - STIG SV-226099r569184
   - STIG SV-226099r794279
   - STIG SV-226102r569184
   - STIG SV-226102r794335
   - STIG SV-226107r569184
   - STIG SV-226107r794336
+  - STIG SV-226109r569184
+  - STIG SV-226109r794353
+  - STIG SV-226109r852074
   - STIG SV-226110r569184
   - STIG SV-226110r794366
   - STIG SV-226117r569184
   - STIG SV-226117r794356
   - STIG SV-226117r852079
-  - STIG SV-226109r569184
-  - STIG SV-226109r794353
-  - STIG SV-226109r852074
-  - STIG SV-226063r569184
-  - STIG SV-226063r794292
+  - STIG SV-226118r569184
+  - STIG SV-226118r794357
+  - STIG SV-226118r852080
+  - STIG SV-254269r848623
   - STIG SV-254271r848629
-  - STIG SV-224873r569186
+  - STIG SV-254386r848974
+  - STIG SV-254388r848980
+  - STIG SV-254416r916422
+  - STIG SV-254417r849067
 
 
 ## Related articles

unified-secops-platform/gov-support.md

@@ -5,7 +5,7 @@ author: batamig
 ms.author: bagol
 ms.service: unified-secops-platform
 ms.topic: concept-article #Don't change.
-ms.date: 11/10/2024
+ms.date: 03/11/2025
 ms.collection:
 - usx-security
 
@@ -20,7 +20,10 @@ This article provides information about Microsoft's unified security operations
 
 ## Feature availability
 
-- All features in Microsoft's SecOps platform that are in general availability are available in both commercial and GCC High and DoD clouds. 
+- All features in Microsoft's SecOps platform that are in general availability are available in commercial and GCC High and DoD clouds. 
+
+  GCC is supported in preview, with the following limitation: The [Advanced hunting](/defender-xdr/advanced-hunting-overview) [JOIN operator](/defender-xdr/advanced-hunting-query-language#learn-common-query-operators) isn't supported between Defender tables and Microsoft Sentinel tables unless you configure per-table retention on your Defender tables in Log Analytics. For more information, see [Advanced hunting event collection](/azure/sentinel/microsoft-365-defender-sentinel-integration?tabs=defender-portal#advanced-hunting-event-collection).
+  
 - Features still in preview are available only in the commercial cloud.
 
 While [automatic attack disruption](/defender-xdr/automatic-attack-disruption) with Microsoft Defender XDR is generally available, [SAP support for attack disruption](/defender-xdr/automatic-attack-disruption) with Microsoft's unified SecOps platform is available only in the commercial cloud.