Secure Score
The tenant's Secure Score and its improvement actions. Set an action's state from a workflow.
Defender
Secure Score, Incidents and Devices in Defender
Report on Secure Score, incidents, alerts and vulnerable software, act on devices, and run advanced hunting queries.
What you can see
Incidents and alerts
Report on incidents and alerts, then update them or add a comment from a workflow.
Device health
Defender for Endpoint beside Entra ID and Intune in 1 device list, and reports of security recommendations and vulnerable software.
How it works
See it, report on it, change it
Add the tenant
Sign in once as an administrator and choose the access Altivane gets.
Run the reports
Secure Score, incidents, alerts and devices, to an Excel workbook.
Run a change
Select the devices and the change, check the window, then Run.
Reports
Reports run to 1 Excel workbook, a sheet for each table.
Scorecard reports
Rated OK, Warning or Critical against thresholds you set, with a section in the client's document when you build documents.
- Secure Score
- Incidents and Alerts
- Defender for Endpoint
- Email Protection
Incidents and alerts
- Incidents
- Alerts
Devices
- Defender Devices
- Security Recommendations
- Vulnerable Software
Secure Score
- Secure Score Improvement Actions
Changes
Select the devices, then the change. A window shows what it does, the devices and the tenant, and Run makes it. Each change goes in the change log.
Devices
- Isolate a device
- Release a device from isolation
- Restrict app execution on a device
- Remove app restriction from a device
- Run an antivirus scan through Defender for Endpoint
- Collect an investigation package
- Offboard a device
- Add a device tag
- Remove a device tag
In a workflow
Start from a sample, or make a workflow from the change to run it over the rows of a CSV file.
- Update incidents
- Comment on incidents
- Update alerts
- Comment on alerts
- Set improvement action state
- Add threat indicators
- Remove threat indicators
Workflows
Repeat a task the same way each time, manually or on a schedule.
Sample workflows
Start from a sample and adapt it. A test run shows each change without making it.
- Resolve Old Informational Incidents
- Scan Devices Needing Antivirus Attention
Defender guides
Everyday tasks shown 3 ways: PowerShell, the admin centre and Altivane.
Microsoft Defender security
How to find devices not seen recently in Microsoft Defender
Microsoft Defender security
How to check antivirus health in Microsoft Defender
Microsoft Defender email protection