Defender for IoT glossary for device builder

This glossary provides a brief description of important terms and concepts for the Microsoft Defender for IoT platform. Select the Learn more links to go to related terms in the glossary. This will help you to learn and use the product tools quickly and effectively.


Term Description Learn more
Device twins Device twins are JSON documents that store device state information including metadata, configurations, and conditions. Module Twin
Defender-IoT-micro-agent twin (DB) The Defender-IoT-micro-agent twin holds all of the information that is relevant to device security, for each specific device in your solution. Device twin

Module Twin
Device inventory Defender for IoT identifies, and classifies devices as a single unique network device in the inventory for:

- Standalone IT, OT, and IoT devices with 1 or multiple NICs.

- Devices composed of multiple backplane components. This includes all racks, slots, and modules.

- Devices that act as network infrastructure. For example, switches, and routers with multiple NICs.

- Public internet IP addresses, multicast groups, and broadcast groups aren't considered inventory devices.

Devices that have been inactive for more than 60 days are classified as inactive Inventory devices.


Term Description Learn more
IoT Hub Managed service, hosted in the cloud, that acts as a central message hub for bi-directional communication between your IoT application and the devices it manages.


Term Description Learn more
Micro Agent Provides depth security capabilities for IoT devices including security posture and threat detection.
Module twin Module twins are JSON documents that store module state information including metadata, configurations, and conditions. Device twins

Defender-IoT-micro-agent twin