You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/machines-view-overview.md
+8-9Lines changed: 8 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -134,30 +134,29 @@ The available device properties to use as filters vary based on the device inven
134
134
135
135
|Property|Tabs|Description|
136
136
|---|---|---|
137
-
|**Cloud platforms**|**All devices**, **Computers & mobile**|The cloud platform that the device belongs to. The available values are: **Azure**, **AWS**, **GCP**, **Arc**,**None**|
138
-
|**Criticality level**|**All devices**, **Computers & mobile**|The available values are: **Very high** (The device is considered a business critical asset), **High**, **Medium**, **Low**,**None**. For more information, see [Overview of critical asset management](/security-exposure-management/critical-asset-management).|
139
-
|**Device category**|**All devices**|The category value assigned to the device. Enter a value or select from the available values: **BMS**, **Computers and Mobile**, **IoT**, **Medical**, **Network Device**, **OT**,**Unknown**|
137
+
|**Cloud platforms**|**All devices**, **Computers & mobile**|The cloud platform that the device belongs to. The available values are: <br/> - **Azure** <br/> - **AWS** <br/> - **GCP** <br/> - **Arc** <br/> -**None**|
138
+
|**Criticality level**|**All devices**, **Computers & mobile**|The available values are: <br/> - **Very high** (The device is considered a business critical asset) <br/> - **High** <br/> - **Medium** <br/> - **Low** <br/> -**None**. For more information, see [Overview of critical asset management](/security-exposure-management/critical-asset-management).|
139
+
|**Device category**|**All devices**|The category value assigned to the device. Enter a value or select from the available values: <br/> - **BMS** <br/> - **Computers and Mobile** <br/> - **IoT** <br/> - **Medical** <br/> - **Network Device** <br/> - **OT** <br/> -**Unknown**|
140
140
|**Device subtype**|**All devices**, **IoT/OT**|The subtype value assigned to the device. Enter a value or select an available value (for example, **Video conference**).|
141
141
|**Device type**|**All devices**, **IoT/OT**|The type value assigned to the device. Enter a value or select an available value (for example, **Audio and Video**).|
142
142
|**Device role**|All|The specific role of the device within the organization. For detailed descriptions of each role, see [Predefined classifications](/security-exposure-management/predefined-classification-rules-and-levels).|
143
143
|**Device value**|All|The assigned value of the device. The available values are **High** and **Low**.|
144
144
|**Discovery sources**|All|The source reporting on the device.|
145
145
|**Exclusion state**|All|The available values are **Not excluded** and **Excluded**. For more information, see [Exclude devices](exclude-devices.md).|
146
-
|**Exposure level**|All|The exposure level of the device based on pending security recommendations. The available values are: - **High** - **Medium** - **Low**: Devices are less vulnerable to exploitation. - **No data available**: Possible causes for this value include: - The device is inactive (stopped reporting for more than 30 days). - The OS on the device isn't supported. For more information, see [minimum requirements for Microsoft Defender for Endpoint](minimum-requirements.md). - The agent software on the device is stale (unlikely).|
146
+
|**Exposure level**|All|The exposure level of the device based on pending security recommendations. The available values are: <br/>- **High**<br/> - **Medium**<br/> - **Low**: Devices are less vulnerable to exploitation. <br/>- **No data available**: Possible causes for this value include: <br/> - The device is inactive (stopped reporting for more than 30 days). - The OS on the device isn't supported. For more information, see [minimum requirements for Microsoft Defender for Endpoint](minimum-requirements.md). - The agent software on the device is stale (unlikely).|
147
147
|**First seen**|All tabs except **Network devices**|How long ago the device was first seen on the network or when it was first reported by the Microsoft Defender for Endpoint sensor. The available values are **Last 7 days** or **Over 7 days ago**.|
148
148
|**Group**|**All devices**, **Computers & mobile**, **Network devices**|Device groups. Enter a value in the box.|
149
149
|**Internet facing**|**Tabs**|**Description**|
150
150
|---|---|---|
151
151
|**All devices**|**Computers & mobile**|Whether the device is internet facing. The available values are **Yes** and **No**.|
152
-
|**Managed by**|**All devices**, **Computers & mobile**|How the device is being managed. The available values are: **Intune**, **Intune**: Microsoft Intune, including co-management with Microsoft Configuration Manager via tenant attach, **ConfigMgr**: Microsoft Configuration manager, **MDE**: Microsoft Defender for Endpoint,**Unknown**: This value is caused by one of the following conditions: An outdated version of Windows, GPO management, Non-Microsoft mobile device management (MDM).|
152
+
|**Managed by**|**All devices**, **Computers & mobile**|How the device is being managed. The available values are: <br/> - **Intune**: Microsoft Intune, including co-management with Microsoft Configuration Manager via tenant attach <br/> - **ConfigMgr**: Microsoft Configuration manager <br/> - **MDE**: Microsoft Defender for Endpoint <br/> -**Unknown**: This value is caused by one of the following conditions: An outdated version of Windows, GPO management, Non-Microsoft mobile device management (MDM).|
153
153
|**Mitigation status**|**All devices**, **Computers & mobile**|The available values are **Contained** and **Isolated**.|
154
154
|**Model**|**All devices**|The model of the device. Enter a value or select from the available values.|
155
-
|**Onboarding status**|**All devices**, **Computers & mobile**|Whether the device is currently onboarded in Defender for Endpoint. Device discovery must be enabled for this filter to appear. The available values are: - **Onboarded**: The device is onboarded to Defender for Endpoint. - **Can be onboarded**: The supported device was discovered, but it isn't currently onboarded. We highly recommend onboarding these devices. - **Unsupported**: The unsupported device was discovered. - **Insufficient info**: The system couldn't determine the supportability of the device.|
156
-
|**OS distribution**|**All devices**, **Computers & mobile**|The distribution of the operating system. The available values are: - **Windows 11** - **Windows 10** - **Windows 8.1** - **Windows 8** - **Windows 7** - **Windows Server 2022** - **Windows Server 2019** - **Windows Server 2016** - **Windows Server 2012 R2** - **Windows Server 2008 R2** - **Linux** - **macOS** - **iOS** - **Android** - **Windows 10 WVD** - **Other**|
155
+
|**Onboarding status**|**All devices**, **Computers & mobile**|Whether the device is currently onboarded in Defender for Endpoint. Device discovery must be enabled for this filter to appear. The available values are: <br/> - **Onboarded**: The device is onboarded to Defender for Endpoint. <br/> - **Can be onboarded**: The supported device was discovered, but it isn't currently onboarded. We highly recommend onboarding these devices. <br/> - **Unsupported**: The unsupported device was discovered. <br/> - **Insufficient info**: The system couldn't determine the supportability of the device.|
156
+
|**OS distribution**|**All devices**, **Computers & mobile**|The distribution of the operating system. The available values are: <br/> - **Windows 11**<br/>- **Windows 10**<br/> - **Windows 8.1**<br/> - **Windows 8**<br/> - **Windows 7**<br/> - **Windows Server 2022**<br/> - **Windows Server 2019**<br/> - **Windows Server 2016**<br/> - **Windows Server 2012 R2**<br/> - **Windows Server 2008 R2**<br/> - **Linux**<br/> - **macOS**<br/> - **iOS**<br/> - **Android**<br/> - **Windows 10 WVD** <br/> - **Other**|
157
157
|**OS Platform**|**All devices**, **Computers & mobile**|The operating system on the device. The available
158
158
|**Risk level**|All|The overall risk assessment of the device based on a combination of factors, including the type and severity of active alerts on the device. The available values are: - **High** - **Medium** - **Low** - **Informational** - **No known risk** Resolving active alerts, approving remediation activities, and suppressing subsequent alerts can lower the risk level.|
159
-
|**Sensor health state**|**All devices**, **Computers & mobile**|The available values for onboarded devices are: - **Active**: Devices that are actively reporting sensor data to the service. - **Inactive**: Devices that stopped sending signals for more than seven days. - **Misconfigured**: Devices with impaired communications or devices that can't send sensor data. For more information on how to address issues on misconfigured devices, see, [Fix unhealthy sensors](fix-unhealthy-sensors.md).|
160
-
159
+
|**Sensor health state**|**All devices**, **Computers & mobile**|The available values for onboarded devices are: <br/> - **Active**: Devices that are actively reporting sensor data to the service. <br/> - **Inactive**: Devices that stopped sending signals for more than seven days. <br/> - **Misconfigured**: Devices with impaired communications or devices that can't send sensor data. For more information on how to address issues on misconfigured devices, see, [Fix unhealthy sensors](fix-unhealthy-sensors.md).|
161
160
|**Site**|**All devices**, **IoT/OT**|Used for Defender for IoT [site security](/defender-for-iot/site-security-overview) (requires a Defender for IoT license).|
162
161
|**Tags**|All|The grouping and tagging that you added to individual devices. For more information, see [Create and manage device tags](machine-tags.md).|
163
162
|**Transient device**|All|The available values are **No** and **Yes**. By default, transient devices are filtered to reduce inventory noise. For more information, see [Identifying transient devices](transient-device-tagging.md).|
0 commit comments