Vulnerability Management Baselines Assessment

Question

I am reviewing security baselines.
https://learn.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/tvm-security-baselines?view=o365-worldwide

Reports show what to configure. It gives examples of registry changes and so on to make on systems.

Are Security Baselines supposed to configure anything?

It was mentioned to me be careful of these baselines as they would configure systems. I have not seen this happen.

Answer 1

@ComputerHabit Thank you for reaching out to us. Researched on your query

Security baselines assessment - we are creating security baseline profile here, creating a template that consists of multiple device configuration settings and a base benchmark to compare against, we are not making any changes on the systems.

security baselines assessment helps you to continuously and effortlessly monitor your organization's security baselines compliance and identify changes in real time.

Reference: https://techcommunity.microsoft.com/t5/microsoft-defender-vulnerability/announcing-microsoft-defender-vulnerability-management-in-public/ba-p/3361003

Let me know if you have any further questions, feel free to post back.