Update threat-analytics.md - add info for missing reports#483
Conversation
added line advising to check Threat Intel if an emailed report is unavailable under Threat Analytics
Yebbenbe
requested review from
AbbyMSFT,
DeCohen,
DebLanger,
ElazarK,
batamig,
chrisda,
janetjo2510,
limwainstein,
orspod and
paulinbar
as code owners
Yebbenbe
requested review from
a team,
EdB-MSFT,
guywi-ms,
mberdugo,
mjcaparas,
poliveria,
sbreingold-ms and
snicklezzz
as code owners
|
@Yebbenbe : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change. |
|
Learn Build status updates of commit 3f2c44a: ✅ Validation status: passed
For more details, please refer to the build report. |
|
Can you review the proposed changes? Important: When the changes are ready for publication, adding a #label:"aq-pr-triaged" |
prmerger-automator
Bot
added
the
aq-pr-triaged
|
@Yebbenbe : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change. |
There was a problem hiding this comment.
Pull request overview
Updates the Threat analytics documentation to help readers troubleshoot cases where a report referenced by an email notification isn’t visible where they expect in the portal.
Changes:
- Adds a limitation/troubleshooting bullet about emailed reports that appear to be missing from Threat analytics.
- Points readers to check the Threat intelligence area when this happens.
| - Antivirus-related statistics are based on Microsoft Defender Antivirus settings. | ||
| - The **Misconfigured devices** column in the main Threat analytics page shows the number of devices affected by a threat when the threat's related recommended actions aren't turned on. However, if Microsoft researchers don't link any recommended actions, the **Misconfigured devices** column shows the status *Not available*. | ||
| - The **Vulnerable devices** column in the main Threat analytics page shows the number of devices running software that are vulnerable to any of the vulnerabilities linked to the threat. However, if Microsoft researchers don't link any vulnerabilities, the **Vulnerable devices** column shows the status *Not available*. | ||
| - Occasionally, you may observe that a **Threat Analytics Report is missing**, after receiving an email to it. Occasionally, these are under **Threat Intel** instead. |
added line advising to check Threat Intel if an emailed report is unavailable under Threat Analytics