Posture solution found in the Defender portal. By bringing cloud, identity, endpoint and external attack surface assets into one enterprise exposure graph, it reveals which assets are critical, how attacks could travel, where choke points lie and how big the blast radius is.
Also called MSEM.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Microsoft Security Exposure Management in context, with comparison tables and the common traps.
Terms in this definition
- IDENTITY
A column property, written IDENTITY(seed, increment), that gives each new row the next number in a rising sequence. SCOPE_IDENTITY reports the latest value created in the current scope, and a rolled-back transaction still uses up the numbers it took.
- External
API Management virtual network mode in which the gateway stays public but can call private back ends inside the VNet.
- Enterprise exposure graph
Exposure Management's map of assets, identities, findings and how they connect, fed by Entra ID, Defender for Cloud, Defender for Endpoint, Defender for Identity and connectors. Attack paths are built from it, and advanced hunting can query it.
- WHERE
Limits a SELECT, UPDATE or DELETE to just the rows meeting a condition. Omit it, and the statement hits every row.
- RADIUS authentication
Way of authenticating point-to-site VPN users where the gateway passes credentials on to a RADIUS server, NPS for example, which validates them against on-premises AD DS.
Related terms
- ExposureGraphEdges
Lets you query, in advanced hunting, how assets and entities connect to each other in the graph that Microsoft Security Exposure Management builds.
- ExposureGraphNodes
Lets you query, in advanced hunting, the things in an organisation, and their properties, as they appear in the graph that Microsoft Security Exposure Management builds.
See Microsoft Security Exposure Management in the full glossary