SecurityInsight settings · Settings > Risk Analysis -- mails and executive view
Read Defender's first sighting of each vulnerability
| Key | SI_RA_SourceFirstSeen |
|---|---|
| Where | Settings > Risk Analysis -- mails and executive view > Protection score |
| Type | Text |
| Default | On |
| Edition | Community |
What it does
Risk Analysis reads Defender for Endpoint's software vulnerabilities export once per run for the first time each CVE was seen on each device (si_source_first_seen).
When set
The protection score's "within Accepted Lifecycle" view ages a vulnerability by Defender's own first sighting instead of SecurityInsight's first detection. Off: the export is not read and the vulnerability findings carry no source first-seen.
When blank or default
Left blank, the default applies: On
Risk and how to reverse it
Changes how the headline figures are presented in the mails and the executive view; the findings themselves are unchanged. Reversible at once.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Turn it off only when the export takes too long or the permission Vulnerability.Read.All is not granted.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack