Maintaining security posture through continuous discovery and health monitoring

Now that we have our production deployments out in the environment, it’s time to get on top of ensuring things are going well and that devices are healthy and functioning as expected. Figure 7.5 shows the first report that we’ll pull from in this section.

Figure 7.4 – MDE Reports dashboard

In the next few sections, we are going to select from some of the various areas in MDE where we will see the status of our EDR sensors, Defender Antivirus, and the settings we’ve deployed.

Sensor health and operating system

The Device Health status report gives us a few pieces of information at a glimpse, such as the EDR sensor health, a chart of active, inactive, and impaired communications, and in case there’s sensor data. We also get a breakdown of OSs and platforms, which gives us an idea of how healthy our environment is based on legacy versus...