Defender-DeviceTvmSecureConfigurationAssessment

ActionTypeTitleSampleRule
anySecure configuration assessmentYN

any: Secure configuration assessment

#
Table
DeviceTvmSecureConfigurationAssessment

Fields #

NameDescription
DeviceId
DeviceName
OSPlatform
Timestamp
ConfigurationId
ConfigurationCategory
ConfigurationSubcategory
ConfigurationImpact
IsCompliant
IsApplicable
Context
IsExpectedUserImpact
MachineGroup

Example Event #

{
  "ConfigurationCategory": "Application",
  "ConfigurationId": "scid-16",
  "ConfigurationImpact": 5.0,
  "ConfigurationSubcategory": "Microsoft Office",
  "Context@odata.type": "#Collection(String)",
  "DeviceId": "99ffb4eafd9c8fb310527d15d666a58ab4661114",
  "DeviceName": "jd-win11-22h2-1.ludus.domain",
  "IsApplicable": 1,
  "IsApplicable@odata.type": "#SByte",
  "IsCompliant": 0,
  "IsCompliant@odata.type": "#SByte",
  "OSPlatform": "Windows11",
  "Timestamp": "2026-08-01T15:13:39Z"
}

References #