How to download Vulnerability report from Microsoft Defender

Copper Contributor

I am trying to download the full vulnerability report from Microsoft Defender which shows all servers and their all vulnerabilities in single sheet. When I download the report from Microsoft Defender it gives report which shows vulnerability name/title, cve, severity, and number of impacted server. but in same report I need server list of impacted servers also. How to do that?

2 Replies
Hi,
you can use advanced hunting query where you should join devices and vulnerability tables or use MDVM API - https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/api/get-assessment-softwa...
Yes we can try KQL query but from Resource Graph explorer only allows to download limited number of Rows. In MDVM, when we try to download list of vulnerabilities, downloaded CSV file only have list of CVEs with number of devices are exposed to it. But no mention of individual device. For that we need go on individual CVE to download list of impacted devices.