Analyze reports


The Reports blade in the Microsoft Defender portal provides access to all the available reports for Microsoft Defender for Endpoint and Microsoft Defender for Office 365.


Name Description
Security report View information about security trends and track the protection status of your identities, data, devices, apps, and infrastructure.


Name Description
Threat protection See details about the security detections and alerts in your organization.
Device health and compliance Monitor the health state, antivirus status, operating system platforms, and Windows 10 versions for devices in your organization.
Vulnerable devices View information about the vulnerable devices in your organization, including their exposure to vulnerabilities by severity level, exploitability, age, and more.
Web protection Get information about the web activity and web threats detected within your organization.
Firewall View connections blocked by your firewall including related devices, why they were blocked, and which ports were used
Device control This report shows your organization's media usage data.
Attack surface reduction rules View information about detections, misconfiguration, and suggested exclusions in your environment.

Email & Collaboration

Name Description
Email & collaboration reports Review Microsoft recommended actions to help improve email and collaboration security.
Manage schedules Manage the schedule for the reports security teams use to mitigate and address threats to your organization.
Reports for download Download one or more of your reports.
Exchange mail flow reports Deep link to Exchange mail flow report in the Exchange admin center.