Threat & Vulnerability Management assessment events, indicating the status of various security configurations on devices
Defender
Table retention
ColdDays
HotDays
TotalInteractiveDays
0
30
30
Schema
Name
Description
Type
ConfigurationCategory
Category or grouping to which the configuration belongs
String
ConfigurationId
Unique identifier for a specific configuration
String
ConfigurationImpact
Rated impact of the configuration to the overall configuration score (1-10)
Double
ConfigurationSubcategory
Subcategory or subgrouping to which the configuration belongs. In many cases, this describes specific capabilities or features.
String
Context
Configuration context data of the machine
Object
DeviceId
Unique identifier for the device in Microsoft Defender for Endpoint
String
DeviceName
Fully qualified domain name (FQDN) of the device
String
IsApplicable
Indicates whether the configuration or policy is applicable
Boolean
IsCompliant
Indicates whether the configuration or policy is properly configured
Boolean
IsExpectedUserImpact
Indicates whether there will be user impact if the configuration will be applied
Boolean
MachineGroup
String
OSPlatform
Platform of the operating system running on the device. This indicates specific operating systems, including variations within the same family, such as Windows 10 and Windows 7