Merge branch 'main' of https://github.com/MicrosoftDocs/defender-docs-pr

Author: DeCohen

defender-endpoint/linux-install-manually.md

@@ -413,8 +413,7 @@ Download the onboarding package from the [Microsoft Defender portal](https://sec
 
    > [!NOTE]
    > To run this command, you must have `python` or `python3` installed on the device depending on the distro and version. If needed, see [Step-by-step Instructions for Installing Python on Linux](https://opensource.com/article/20/4/install-python-linux).
-   > 
-   > To onboard a device that was previously offboard, you must remove the mdatp_offboard.json file located at /etc/opt/microsoft/mdatp.
+   
 
    If you're running RHEL 8.x or Ubuntu 20.04 or higher, you need to use `python3`. Run the following command:
    

defender-endpoint/onboard-downlevel.md

@@ -41,11 +41,13 @@ To onboard down-level Windows client endpoints to Defender for Endpoint, you can
 **Defender endpoint security solution**
 
 - Windows 7 SP1 Pro
+- Windows 7 SP1 Enterprise
 - Windows Server 2008 R2 SP1
 
 **MMA/SCEP**
 
 - Windows 7 SP1 Pro
+- Windows 7 SP1 Enterprise
 - Windows 8.1 Pro
 - Windows 8.1
 - Windows Server 2008 R2 SP1
@@ -91,7 +93,7 @@ Review the following details to verify minimum system requirements:
     > [!NOTE]
     > Installation of .NET 4.5 might require you to restart your computer after installation.
 
-- Meet the Azure Log Analytics agent minimum system requirements. For more information, see [Collect data from computers in you environment with Log Analytics](/azure/log-analytics/log-analytics-concept-hybrid#prerequisites)
+- Meet the Azure Log Analytics agent minimum system requirements. For more information, see [Collect data from computers in your environment with Log Analytics](/azure/log-analytics/log-analytics-concept-hybrid#prerequisites)
 
 ### Installation steps
 
@@ -212,7 +214,7 @@ Follow the steps in [Run a detection test on a newly onboarded device](run-detec
     > [!NOTE]
     > This article assumes you're using x64-based servers (MMA Agent .exe x64 New SHA-2 compliant version).
 
-**Step 2: Create a file name DeployMMA.cmd (using notepad)**
+**Step 2: Create a file named DeployMMA.cmd (using notepad)**
 Add the following lines to the cmd file. Note that you'll need your WORKSPACE ID and KEY.
 
 The following command is an example. Replace the following values:
@@ -344,4 +346,4 @@ You can use either of the following methods:
     $AgentCfg.ReloadConfiguration()
     ```
 
-[!INCLUDE [Microsoft Defender for Endpoint Tech Community](../includes/defender-mde-techcommunity.md)]
+[!INCLUDE [Microsoft Defender for Endpoint Tech Community](../includes/defender-mde-techcommunity.md)]

defender-vulnerability-management/fixed-reported-inaccuracies.md

@@ -38,6 +38,10 @@ The following tables present the relevant vulnerability information organized by
 |---|---|---|
 | - | Updated CVSS Score for CVE-2024-10524 | 04-November-25 |
 | 119136 | Fixed bad normalization in OpenSSL | 11-November-25 |
+| 120318 | Fixed inaccurate detections in MS Visual Studio Code by excluding incorrect Raw Product Name Windsurf | 19-Nov-25 |
+| - | Added Microsoft Defender Vulnerability Management support for MS Azure Data Studio | 19-Nov-25 |
+| 109529 | Fixed inaccuracy in Palo Alto Networks PAN-OS vulnerabilities - CVE-2025-0133 and CVE-2024-0012 | 19-Nov-25 |
+| 118097 | Removed Dell Unisphere for PowerMax from the list of affected products for CVE-2024-25955 | 19-Nov-25 |
 
 ## October 2025
 

defender-xdr/advanced-hunting-aiagentsinfo-table.md

@@ -6,8 +6,8 @@ ms.service: defender-xdr
 ms.subservice: adv-hunting
 f1.keywords: 
   - NOCSH
-ms.author: abbyweisberg
-author: AbbyMSFT
+ms.author: pauloliveria
+author: poliveria
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro

defender-xdr/advanced-hunting-alertevidence-table.md

@@ -6,8 +6,8 @@ ms.service: defender-xdr
 ms.subservice: adv-hunting
 f1.keywords: 
   - NOCSH
-ms.author: dansimp
-author: schmurky
+ms.author: pauloliveria
+author: poliveria
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro

defender-xdr/advanced-hunting-alertinfo-table.md

@@ -6,8 +6,8 @@ ms.service: defender-xdr
 ms.subservice: adv-hunting
 f1.keywords: 
   - NOCSH
-ms.author: dansimp
-author: schmurky
+ms.author: pauloliveria
+author: poliveria
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro

defender-xdr/advanced-hunting-assignedipaddresses-function.md

@@ -6,8 +6,8 @@ ms.service: defender-xdr
 ms.subservice: adv-hunting
 f1.keywords: 
   - NOCSH
-ms.author: dansimp
-author: schmurky
+ms.author: pauloliveria
+author: poliveria
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro

defender-xdr/advanced-hunting-behaviorentities-table.md

@@ -6,8 +6,8 @@ ms.service: defender-xdr
 ms.subservice: adv-hunting
 f1.keywords: 
   - NOCSH
-ms.author: dansimp
-author: schmurky
+ms.author: pauloliveria
+author: poliveria
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro

defender-xdr/advanced-hunting-behaviorinfo-table.md

@@ -6,8 +6,8 @@ ms.service: defender-xdr
 ms.subservice: adv-hunting
 f1.keywords: 
   - NOCSH
-ms.author: dansimp
-author: schmurky
+ms.author: pauloliveria
+author: poliveria
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro

defender-xdr/advanced-hunting-best-practices.md

@@ -4,10 +4,10 @@ description: Learn how to construct fast, efficient, and error-free threat hunti
 search.appverid: met150
 ms.service: defender-xdr
 ms.subservice: adv-hunting
-f1.keywords:
+f1.keywords: 
   - NOCSH
-ms.author: dansimp
-author: schmurky
+ms.author: pauloliveria
+author: poliveria
 ms.localizationpriority: medium
 manager: dansimp
 audience: ITPro