UPDATE 2nd May 2022. Microsoft Defender for Business is now generally available. Please see New endpoint security for small and medium businesses now available with Defender for Business. - Microsoft...
Updated Apr 17, 2025
Version 4.0
Blog Post
UPDATE as of last month (September 2022) the report is also available for Defender for Business. Consider the rest of this post as void.
Hi Jon Maunder,
I got to work with Defender for Business for a few months now and one thing about it is bothering me greatly. The ASR Report is missing. ASR is listed as a full feature https://docs.microsoft.com/en-us/microsoft-365/security/defender-business/compare-mdb-m365-plans?msclkid=5af37c20c02f11ecb9e3caf81ac33cc2&view=o365-worldwide#compare-microsoft-defender-for-business-to-microsoft-defender-for-endpoint-plans-1-and-2, no asterisk or note. I cannot collect the logs via LogAnalytics, DeviceEvents isn't available in Advanced Hunting and the page to the report, which should be https://security.microsoft.com/asr?viewid=configuration just shows that I'm missing access (which the site probably thinks, as the required events to show this are missing). This situation isn't ideal for a customer that has been buying Business Premium since 2017 and has been Cloud Only ever since - no servers, clients only (I say that, because I already got hints for Azure Sentinel or Defender for Cloud, both of which don't fit the scenario).
Is this intentional? Was it missed? Please clarify this for me and my customer(s).
Regards
Martin
EDIT: Link embed didn't work as expected.