New Threat & Vulnerability Management capabilities in Defender ATP

Microsoft announces the following new capabilities that will go into public preview this month:

  • Vulnerability Assessment (VA) support for Windows Servers 2008 R2 and above
  • Integration with ServiceNow for improved IT/Security communication
  • Advanced hunting across vulnerabilities and security alerts
  • Role-based access controls (RBAC) for teams focusing on vulnerability management
  • Automated user-impact analysis

The ServiceNow integration is very easy. Just follow the guide in the settings tab

This feature provides one-click remediation request via Service Now to other IT teams.

TVM capabilities – Let’s use in hunting 🙂

TVM hunting

RBAC – more granular control

Defender ATP rbac

Happy Hunting!

More articles

Welcome to us Pascal!

[Who are you?] My name is Pascal DeBeaux and I am 54 years old, I live outside of Norrtälje and...

Welcome to us Alexandra!

[Who are you?]My name is Alexandra and I am 36 years old, living in Floda just outside of...

Onevinn awarded with the Infra and Database Migration to Microsoft Azure Specialization.