Exposure level clarification

[m_krone]

Hi everybody,

I having some machines in Defender ATP and wondering about the Exposure level.

As explained in the info icon the exposure level is only about the security recommendations.

Is there any deeper explanation how this number is generated? Because I see some low level recommendations but in some cases the level is medium - this does not make sense to me.

Anyone having the same?

Regards

[#2]

The exposure score is continuously calculated on each device in the organization and influenced by the following factors:

Weaknesses, such as vulnerabilities discovered on the device
External and internal threats such as public exploit code and security alerts
Likelihood of the device to get breached given its current security posture
Value of the device to the organization given its role and content

To learn more:
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/tvm-expos...