%3CLINGO-SUB%20id%3D%22lingo-sub-200828%22%20slang%3D%22en-US%22%3EWhat%E2%80%99s%20new%20in%20the%20WDATP%20Portal%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-200828%22%20slang%3D%22en-US%22%3E%3CP%3E%3CU%3E%3CSTRONG%3E%3CFONT%20color%3D%22%230000ff%22%3EFull%20inventory%20of%20the%20device%20network%20interface%20data%3C%2FFONT%3E%20%3C%2FSTRONG%3E%3C%2FU%3E%3C%2FP%3E%0A%3CP%3ENetwork%20related%20information%20is%20of%20high%20value%20in%20a%20range%20of%20use-cases%2C%20to%20name%20a%20few%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EPlace%20the%20device%20within%20the%20network%3C%2FLI%3E%0A%3CLI%3EUniquely%20identify%20a%20device%20based%20on%20MAC%20address%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20following%20image%20shows%20how%20we've%20enriched%20the%20dataset%20to%20expose%20full%20information%20on%20all%20the%20device%20network%20interfaces%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F35414iF245EF88438BF5CE%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22IPs.png%22%20title%3D%22IPs.png%22%20%2F%3E%3C%2FSPAN%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CU%3E%3CSTRONG%3E%3CFONT%20color%3D%22%230000ff%22%3EAdvanced%20hunting%20improvements%3C%2FFONT%3E%20%3C%2FSTRONG%3E%3C%2FU%3E%3C%2FP%3E%0A%3CP%3EWe%20value%20all%20the%20feedback%20you've%20been%20providing%20through%20the%20portal%2C%20please%20continue%20doing%20so.%20We're%20also%20happy%20to%20share%20the%20news%20related%20to%20the%20following%20most%20popular%20feedback%20items.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-left%22%20style%3D%22width%3A%20200px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F35411iE47327EE91A6C065%2Fimage-size%2Fsmall%3Fv%3D1.0%26amp%3Bpx%3D200%22%20alt%3D%22Feedback.png%22%20title%3D%22Feedback.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CFONT%20color%3D%22%230000ff%22%3EFull%20screen%20view%3C%2FFONT%3E%20%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EIf%20you're%20one%20of%20those%20hunters%20who%20likes%20to%20take%20advantages%20of%20the%20BIG%20screen%20view%20to%20focus%20on%20your%20hunting%20query%20and%20related%20results%20-%20then%20option%20below%20was%20made%20for%20you.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F35410i8496016B224E199F%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22AH1.png%22%20title%3D%22AH1.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20color%3D%22%230000ff%22%3E%3CSTRONG%3ETuning%20%2F%20filtering%20the%20hunting%20results%3C%2FSTRONG%3E%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3ESo%20you%20enjoyed%20the%20big%20screen%20view%2C%20authored%20and%20executed%20an%20amazing%20hunting%20query%2C%20but%20then%20found%20the%20results%20were%20too%20broad.%3C%2FP%3E%0A%3CP%3ENo%20worries%2C%20we've%20added%20a%20capability%20to%20help%20you%20zoom%20in%20and%20filter%20out%20the%20noise.%3C%2FP%3E%0A%3CP%3EThe%20filter%20pane%20will%20automatically%20open%20when%20the%20query%20processing%20completes%2C%20and%20enable%20you%20to%20quickly%20add%20filters%20to%20select%20or%20exclude%20specific%20results.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F35415iBD4EF17A585A18AF%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22AH2.png%22%20title%3D%22AH2.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%3CFONT%20color%3D%22%230000ff%22%3EFolders%20hierarchy%20for%20the%20saved%20%2F%20shared%20queries%3C%2FFONT%3E%20%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EOk%2C%20all%20done!%20Now%20that%20you've%20got%20the%20most%20effective%20hunting%20query%2C%20you'll%20be%20happy%20to%20know%20that%20we've%20added%20folder%20support%20so%20you%20can%20save%20your%20queries%20in%20an%20organized%20manner%20for%20future%20use.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F35412i8875A0D1FBC61FBC%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22AH3.png%22%20title%3D%22AH3.png%22%20%2F%3E%3C%2FSPAN%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CFONT%20color%3D%22%230000ff%22%3E%3CSTRONG%3EThank%20you%2C%3C%2FSTRONG%3E%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%3E%3CFONT%20color%3D%22%230000ff%22%3E%3CSTRONG%3EWindows%20Defender%20ATP%20team%3C%2FSTRONG%3E%3C%2FFONT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-200828%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Etomerb%40microsoft.com%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Microsoft

Full inventory of the device network interface data

Network related information is of high value in a range of use-cases, to name a few:

  • Place the device within the network
  • Uniquely identify a device based on MAC address

 

The following image shows how we've enriched the dataset to expose full information on all the device network interfaces

 

IPs.png 

Advanced hunting improvements

We value all the feedback you've been providing through the portal, please continue doing so. We're also happy to share the news related to the following most popular feedback items.

 Feedback.png

 

 

 

 

Full screen view

If you're one of those hunters who likes to take advantages of the BIG screen view to focus on your hunting query and related results - then option below was made for you.

 AH1.png

 

Tuning / filtering the hunting results

So you enjoyed the big screen view, authored and executed an amazing hunting query, but then found the results were too broad.

No worries, we've added a capability to help you zoom in and filter out the noise.

The filter pane will automatically open when the query processing completes, and enable you to quickly add filters to select or exclude specific results.

 AH2.png

 

Folders hierarchy for the saved / shared queries

Ok, all done! Now that you've got the most effective hunting query, you'll be happy to know that we've added folder support so you can save your queries in an organized manner for future use.

 AH3.png 

Thank you,

Windows Defender ATP team