Microsoft Security Exposure Management
Vulnerabilities and exposure

Security Events

In brief

The `security-events.md` page was deleted, including prerequisites and steps for reviewing, filtering, and opening security events in the Microsoft Defender portal.

What Defender admins need to know

Administrators no longer have this documented procedure as a reference; no administrator action is stated.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

deleted file mode 100644

title: Explore security events in Microsoft Security Exposure Management description: Learn how to work with security events in Microsoft Security Exposure Management. ms.topic: overview ms.date: 11/04/2024

Explore security events

Security events in Microsoft Security Exposure Management track initiative and metric score drop incidents in order to determine how they affect organizational security posture.

Prerequisites

Learn about security events.

Review security events

  1. In the Microsoft Defender portal, select Exposure management -> Exposure insights -> Events to open the Events page.

  2. Select the time range you need in the calendar drop-down.

  3. To filter by initiative score drop events or metric score drop events, select filter or the score drop event quantity.

  4. Select a specific event to open it in Initiatives or Metrics.

Next steps