A flyout panel will open with a more compact view of the information on the page. Select the software that you want to investigate. You can also filter the list view based on weaknesses found in the software, threats associated with them, and tags like whether the software has reached end-of-support. The Software inventory page opens with a list of software installed in your network, including the vendor name, weaknesses found, threats associated with them, exposed devices, impact to exposure score, and tags.īy default, the view is filtered by Product Code (CPE): Available. For example, for the best search results you'd write "windows_10" or "windows_11" instead of "Windows 10" or "Windows 11". If you search for software using the Microsoft Defender for Endpoint global search, make sure to put an underscore instead of a space. Navigate to the Software inventory pageĪccess the software inventory page by selecting Software inventory from the Vulnerability management navigation menu in the Microsoft 365 Defender portal. It also provides a link to a Threat Analytics report soon as it's available. In fact, you'll see if a particular software is connected to a live threat campaign. The engine automatically grabs information from multiple security feeds. Since it's real time, in a matter of minutes, you'll see vulnerability information as they get discovered. In the field of discovery, we're leveraging the same set of signals that is responsible for detection and vulnerability assessment in Microsoft Defender for Endpoint detection and response capabilities.
As CPEs are used by vulnerability management to identify the software and any vulnerabilities, even though software products without a CPE will be shown in the software inventory page, they will not be supported by vulnerability management and information like, exploits, number of exposed devices, and weaknesses won't be available for them.
0 kommentar(er)
