Automate - Security Management - Defender for Endpoint Actions

Automate - Security Management - Defender for Endpoint Actions#

Dashboard for Defender for Endpoint actions - endpoint management

Incident and Alert Actions
View Incidents
View Alerts

Device Actions
View Devices
View and Manage Machine Actions
Bulk Actions
Initiate Scan on Device(s)
Manage Isolation of Device(s)
Offboard Device(s)
Manage code execution on device(s)
Collect investigation from device(s)
Stop and Quarantine File on device(s)

CHARTS
Title	Type	Resource	Description
Device Count by Exposure	chart-pie	Defender Devices	Count of machines by exposure level
Device Count by Status	chart-pie	Defender Devices	Count of machine actions by type of action
Action Count by Type	chart-pie	Defender Actions	Count of machine actions by type of action

TABLES
Title	Resource	Fields	Drill-down
Action Counts by machine - Top 10	Defender Actions	Machine DNS Name	drilldown-modelType: device/mssecurity/MachineAction