Viewing and Managing Threats, Alerts, and Health Issues with Microsoft Defender AV

Viewing Devices with Threats Detected by Microsoft Defender

The Threats Detected page shows a list of devices with detected threats.

1. To view devices with threats detected by Microsoft Defender
2. In Service Center, click Antivirus > Microsoft Defender AV.
3. Do one of the following:
   • Click the Threats Detected in the Last 24 Hours box.
   • In the Status menu, on the right, click Threats.
4. Optionally, to filter the list by alert category, select a category from the list.

Viewing Devices with Active Microsoft Defender Alerts

The Alerts page shows a list of devices with alerts from Microsoft Defender.

The table displays:

• The category of the alert
• The site the device belongs to
• The name of the device or website
• The time of the alert
• A link to the alert rule configuration
• A link to create a ticket

To view devices with active Microsoft Defender alerts

1. In Service Center, click Antivirus > Microsoft Defender AV.
2. Do one of the following:
   • Click the Active Alerts box.
   • In the Status menu, on the right, click Alerts.

To manage alerts detected by Microsoft Defender

1. In Service Center, click Antivirus > Microsoft Defender AV.
2. Do one of the following:
   • Click the Active Alerts box.
   • In the Status menu, on the right, click Alerts.
3. Do any of the following:
   • To view the site the device belongs to, click the link in the Site column.
   • To view the device’s overview page, click the link in the Device/Website column.
   • To view and potentially modify the alert configuration, click the link in the Alert Configuration column.
   • To create a trouble ticket to take action on the alert, click the Create Ticket link.
   • To clear an alert, select the check box beside the alert, and then click Clear. For more information about clearing alerts, see Clearing Alerts.
   • To clear all alerts, click Clear All.
   • To suppress an alert, select the check box beside the alert, and then click Suppress. For more information about alert suppression, see Suppressing Alerts.
   • To export the alert list as a spreadsheet or document, click the Export button and select an option.

Viewing Devices with Microsoft Defender Health Issues

The Devices Having Health Issues page shows a list of devices with health issues detected by Microsoft Defender.

The table displays:

• The status of the device
• The site the device belongs to
• The device’s name or alias
• The policy the device belongs to
• A description of the device

To view devices with Microsoft Defender health issues

1. In Service Center, click Antivirus > Microsoft Defender AV.
2. Do one of the following:
   • Click the Devices Having Health Issues box.
   • In the Status menu, on the right, click Health.
3. Optionally, do any of the following:
   • Filter the list by selecting a health issue from the box.
   • To go the site the device belongs to, click the link in the Site column.
   • To go to the device’s overview page, click the link in the Device Name/Alias column.