detection.wiki

Defender-DeviceTvmSecureConfigurationAssessment

any: Secure configuration assessment

#

Scope grouping: This repository-authored catalog entry represents a broad attribution scope, not a distinct emitted event or operation. Any sample below is a representative record from that scope; attached rules, if any, are listed separately.

Table
DeviceTvmSecureConfigurationAssessment

Representative record #

{
  "ConfigurationCategory": "Application",
  "ConfigurationId": "scid-16",
  "ConfigurationImpact": 5.0,
  "ConfigurationSubcategory": "Microsoft Office",
  "Context@odata.type": "#Collection(String)",
  "DeviceId": "99ffb4eafd9c8fb310527d15d666a58ab4661114",
  "DeviceName": "jd-win11-22h2-1.ludus.domain",
  "IsApplicable": 1,
  "IsApplicable@odata.type": "#SByte",
  "IsCompliant": 0,
  "IsCompliant@odata.type": "#SByte",
  "OSPlatform": "Windows11",
  "Timestamp": "2026-08-01T15:13:39Z"
}

References #