Understanding the different reports in MDE

%3CLINGO-SUB%20id%3D%22lingo-sub-2768394%22%20slang%3D%22en-US%22%3EUnderstanding%20the%20different%20reports%20in%20MDE%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2768394%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%20I'm%20new%20to%20working%20in%20Microsoft%20Defender%20and%20Endpoint%20and%20trying%20to%20understand%20some%20of%20the%20reports.%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20I%20navigate%20to%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fsecurity.microsoft.com%2Fsecurityreports%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EReports%20-%20Microsoft%20365%20security%3C%2FA%3E%26nbsp%3Band%20click%20on%20the%20predefined%20%22Security%20report%22%20my%20main%20questions%20are%20under%20the%20%22Devices%22%20section.%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3EWhen%20I%20was%20looking%20I%20saw%20that%20the%20report%20said%20%22Devices%20with%20Active%20Malware%22%20had%201%20device%20with%201%20active%20malware.%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Aireal_2-1632166557440.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F311648iEF670C54EB27BE01%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Aireal_2-1632166557440.png%22%20alt%3D%22Aireal_2-1632166557440.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EBut%20then%20there%20is%20also%20a%20part%20that%20says%20%22Malware%20on%20devices%22%20and%20there%20were%20like%2021%20line%20items%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Aireal_3-1632166591122.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F311649i0978C6D8F1073B08%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Aireal_3-1632166591122.png%22%20alt%3D%22Aireal_3-1632166591122.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CBR%20%2F%3EHowever%2C%20I%20can't%20find%20any%20more%20information%20about%20the%2021%20malware%20items.%20They%20don't%20tell%20me%20the%20device%20name.%20I'm%20just%20confused%20as%20to%20what%20this%20is.%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2770570%22%20slang%3D%22en-US%22%3ERe%3A%20Understanding%20the%20different%20reports%20in%20MDE%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2770570%22%20slang%3D%22en-US%22%3EYou%20can%20also%20view%20the%20active%20malware%20report%20for%20more%20details.%3CBR%20%2F%3E1)%20Sign%20in%20to%20the%20Microsoft%20Endpoint%20Manager%20admin%20center.%3CBR%20%2F%3E2)%20Select%20Endpoint%20security%20%26gt%3B%20Antivirus%20%26gt%3B%20Windows%2010%20active%20malware%20tab.%3C%2FLINGO-BODY%3E
New Contributor

Hello, I'm new to working in Microsoft Defender and Endpoint and trying to understand some of the reports. 

If I navigate to Reports - Microsoft 365 security and click on the predefined "Security report" my main questions are under the "Devices" section. 

When I was looking I saw that the report said "Devices with Active Malware" had 1 device with 1 active malware. 

Aireal_2-1632166557440.png


But then there is also a part that says "Malware on devices" and there were like 21 line items

Aireal_3-1632166591122.png

 


However, I can't find any more information about the 21 malware items. They don't tell me the device name. I'm just confused as to what this is. 


1 Reply
You can also view the active malware report for more details.
1) Sign in to the Microsoft Endpoint Manager admin center.
2) Select Endpoint security > Antivirus > Windows 10 active malware tab.
www.000webhost.com