Dashboard

Description of the widgets on the standard Microsoft Defender dashboard:

• Protection status shows the current status of the computers

  • Open threats

    Number of computers with open threats that could not be removed by Microsoft Defender.

  • Signatures or status not up to date

    Number of computers without open threats, whose Microsoft Defender signature definitions have been updated, and whose last status report was no longer than 1 week ago.

  • Protected

    Number of computers whose Microsoft Defender signature definitions are older than 1 week or whose last status message was more than 1 week ago.

  • Inactive

    Number of computers not running Microsoft Defender Service

• Service overview shows the number of computers running the Windows Defender Antimalware Service or Windows Defender Antivirus Network Inspection Service.

• Feature overview

  Indicates the number of computers having individual Microsoft Defender features enabled.

• Threats by severity

  Displays all threats that have occurred and groups them by severity. We do not distinguish between threats that have already been resolved and those that are still open.

• Threats by category

  Displays all threats that have occurred and groups them by category. We do not distinguish between threats that have already been resolved and those that are still open.

• Microsoft Defender state provides an overview of the status of Microsoft Defender on the computers:

  • Not set: The status has not yet been reported
  • Active
  • Partly active: One or more Microsoft Defender components are not running, e.g. real-time protection
  • Inactive: The Microsoft Defender Service is not running

• Affected computer count history

  Shows the history of affected computers by number

• Threat history by severity

  Shows threat history by severity

• Threat history by category

  Shows threat history by category