Skip to content

Commit 4de0cbc

Browse files
authored
Revise README for Microsoft Defender plugin
Updated README.md for Microsoft Defender plugin to clarify authentication requirements, error handling, and dashboard descriptions.
1 parent 917a331 commit 4de0cbc

1 file changed

Lines changed: 5 additions & 5 deletions

File tree

plugins/MicrosoftDefender/v1/docs/README.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ Enter a name for your data source. This helps you to identify this data source i
66

77
**Authentication:**
88

9-
M365 client credentials are required to configure this plugin. Follow the steps in [Configuring App Registration for the Microsoft 365 Plugin](https://docs.squaredup.com/data-sources/microsoft-365-plugin/configuring-app-registration-for-the-microsoft-365-plugin). Ensure to add the following permissions below to configure your app for Defender:
9+
Client credentials are required to configure this plugin. Follow the same steps explained in the Microsoft 365 article [Configuring App Registration for the Microsoft 365 Plugin](https://docs.squaredup.com/data-sources/microsoft-365-plugin/configuring-app-registration-for-the-microsoft-365-plugin). Ensure to add the following permissions below to configure your app for Defender:
1010

1111
- _SecurityAlert.Read.All_
1212
- _SecurityIncident.Read.All_
@@ -23,7 +23,7 @@ Click Test and add to validate the data source configuration. SquaredUp will now
2323

2424
# Testing and troubleshooting
2525

26-
If you encounter an error refer to the guidance or contact our support team in-app or via [SquaredUp Support](https://docs.squaredup.com/submit-ticket)
26+
If you encounter an error refer to the errors and warnings reported during on the data source configuration screen.
2727

2828
For errors on dashboard tiles see [Troubleshooting tiles](https://docs.squaredup.com/troubleshooting/troubleshooting-tiles).
2929

@@ -35,7 +35,7 @@ Once you have successfully connected to data source, you can start exploring you
3535

3636
The following pre-built dashboards are available with this plugin:
3737

38-
- **Cockpit** — Tenant-wide security overview, showing your current and historical Secure Score, device exposure state, active incidents, and a breakdown of detections by category (application control, exploits, persistence & privilege escalation, and malware & antivirus).
38+
- **Cockpit** — Tenant-wide security overview, showing your current and historical Secure Score, device exposure state, active incidents, and some example detections by category (application control, exploits, persistence & privilege escalation, and malware & antivirus).
3939
- **Devices Health** — Device fleet health, with counts of high- and medium-exposure devices, devices with critical vulnerabilities, and non-compliant devices.
4040
- **Incidents** — Incident operations view, showing active and unassigned incidents, average time to resolve, and incidents broken down by severity, status, and priority score.
4141
- **Devices** — Tiles will appear when you drill into a **Device** object:
@@ -46,7 +46,7 @@ The following pre-built dashboards are available with this plugin:
4646
## Graph imported objects
4747
The following objects are imported:
4848

49-
- **Devices** — Contains data about each of the devices managed by the connected Defender instance.
49+
- **Devices** — Contains property data about each of the devices managed by the connected Defender instance.
5050

5151
## Data streams
5252
The following data streams are installed with this plugin:
@@ -59,7 +59,7 @@ The following data streams are installed with this plugin:
5959
- **Devices** — Returns detailed attributes and properties for the specified device.
6060
- **Alerts** — Returns a list of alert resources created to track suspicious activities in an organization. *Parameters:*
6161
- Filters available: *Severity, Status*
62-
- **Incidents** — Returns a list of incident objects that Microsoft 365 Defender created to track attacks in an organization. *Parameters:*
62+
- **Incidents** — Returns a list of incident objects that Microsoft Defender created to track attacks in an organization. *Parameters:*
6363
- Filters available: *Severity, Status*
6464

6565

0 commit comments

Comments
 (0)