Secure Score
The tenant's Secure Score and its improvement actions. Set an action's state from a workflow.
Defender
Secure Score, Incidents and Devices in Defender
Report on Secure Score, incidents, alerts and vulnerable software, act on devices, and run advanced hunting queries.
What you can see
Incidents and alerts
Report on incidents and alerts, then update them or add a comment from a workflow.
Device health
Defender for Endpoint beside Entra ID and Intune in 1 device list, and reports of security recommendations and vulnerable software.
How it works
Explore, report and make changes
Add the tenant
Sign in once as an administrator and choose the access Altivane gets.
Run the reports
Secure Score, incidents, alerts and devices, to an Excel workbook.
Run a change
Select the devices and the change, check the window, then Run.
Reports
Each report writes its tables to an Excel workbook, with a separate sheet for each table.
Scorecard reports
Rated OK, Warning or Critical against thresholds you set, with a section in the client's document when you build documents.
- Secure Score
- Incidents and Alerts
- Defender for Endpoint
- Email Protection
Incidents and alerts
- Incidents
- Alerts
Devices
- Defender Devices
- Security Recommendations
- Vulnerable Software
Secure Score
- Secure Score Improvement Actions
Changes
Select the devices and choose a change. Its window shows what it will do, which devices it affects and the tenant. Select Run to make the change; it is recorded in the tenant's change log.
Devices
- Isolate a device
- Release a device from isolation
- Restrict app execution on a device
- Remove app restriction from a device
- Run an antivirus scan through Defender for Endpoint
- Collect an investigation package
- Offboard a device
- Add a device tag
- Remove a device tag
In a workflow
Start from a sample, or make a workflow from the change to run it over the rows of a CSV file.
- Update incidents
- Comment on incidents
- Update alerts
- Comment on alerts
- Set improvement action state
- Add threat indicators
- Remove threat indicators
Workflows
Repeat a task the same way each time, manually or on a schedule.
Sample workflows
Start from a sample and adapt it.
- Resolve Old Informational Incidents
- Scan Devices Needing Antivirus Attention
Guides for Defender
Compare everyday tasks in PowerShell, the admin centre and Altivane.
Microsoft Defender security
How to find devices not seen recently in Microsoft Defender
Microsoft Defender security
How to check antivirus health in Microsoft Defender
Microsoft Defender email protection