You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: plugins/MicrosoftDefender/v1/docs/README.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ Enter a name for your data source. This helps you to identify this data source i
6
6
7
7
**Authentication:**
8
8
9
-
M365 client credentials are required to configure this plugin. Follow the steps in[Configuring App Registration for the Microsoft 365 Plugin](https://docs.squaredup.com/data-sources/microsoft-365-plugin/configuring-app-registration-for-the-microsoft-365-plugin). Ensure to add the following permissions below to configure your app for Defender:
9
+
Client credentials are required to configure this plugin. Follow the same steps explained in the Microsoft 365 article[Configuring App Registration for the Microsoft 365 Plugin](https://docs.squaredup.com/data-sources/microsoft-365-plugin/configuring-app-registration-for-the-microsoft-365-plugin). Ensure to add the following permissions below to configure your app for Defender:
10
10
11
11
-_SecurityAlert.Read.All_
12
12
-_SecurityIncident.Read.All_
@@ -23,7 +23,7 @@ Click Test and add to validate the data source configuration. SquaredUp will now
23
23
24
24
# Testing and troubleshooting
25
25
26
-
If you encounter an error refer to the guidance or contact our support team in-app or via [SquaredUp Support](https://docs.squaredup.com/submit-ticket)
26
+
If you encounter an error refer to the errors and warnings reported during on the data source configuration screen.
27
27
28
28
For errors on dashboard tiles see [Troubleshooting tiles](https://docs.squaredup.com/troubleshooting/troubleshooting-tiles).
29
29
@@ -35,7 +35,7 @@ Once you have successfully connected to data source, you can start exploring you
35
35
36
36
The following pre-built dashboards are available with this plugin:
37
37
38
-
-**Cockpit** — Tenant-wide security overview, showing your current and historical Secure Score, device exposure state, active incidents, and a breakdown of detections by category (application control, exploits, persistence & privilege escalation, and malware & antivirus).
38
+
-**Cockpit** — Tenant-wide security overview, showing your current and historical Secure Score, device exposure state, active incidents, and some example detections by category (application control, exploits, persistence & privilege escalation, and malware & antivirus).
39
39
-**Devices Health** — Device fleet health, with counts of high- and medium-exposure devices, devices with critical vulnerabilities, and non-compliant devices.
40
40
-**Incidents** — Incident operations view, showing active and unassigned incidents, average time to resolve, and incidents broken down by severity, status, and priority score.
41
41
-**Devices** — Tiles will appear when you drill into a **Device** object:
@@ -46,7 +46,7 @@ The following pre-built dashboards are available with this plugin:
46
46
## Graph imported objects
47
47
The following objects are imported:
48
48
49
-
-**Devices** — Contains data about each of the devices managed by the connected Defender instance.
49
+
-**Devices** — Contains property data about each of the devices managed by the connected Defender instance.
50
50
51
51
## Data streams
52
52
The following data streams are installed with this plugin:
@@ -59,7 +59,7 @@ The following data streams are installed with this plugin:
59
59
-**Devices** — Returns detailed attributes and properties for the specified device.
60
60
-**Alerts** — Returns a list of alert resources created to track suspicious activities in an organization. *Parameters:*
61
61
- Filters available: *Severity, Status*
62
-
-**Incidents** — Returns a list of incident objects that Microsoft 365 Defender created to track attacks in an organization. *Parameters:*
62
+
-**Incidents** — Returns a list of incident objects that Microsoft Defender created to track attacks in an organization. *Parameters:*
0 commit comments