Applying updates through vSphere Lifecycle Manager, entering maintenance mode where needed, so that every cluster and host ends up compliant with its image or baselines. Readiness can first be confirmed by a pre-check that changes nothing.
Read more: Broadcom TechDocs
In the Ultra Transcenders books
Each book explains remediation in context, with comparison tables and the common traps.
Terms in this definition
- vSphere Lifecycle Manager
Service in vCenter for installing, updating and upgrading ESX hosts and clusters based on a desired image. From 9.0, host upgrades cannot be done with baselines.
- WHERE
Limits a SELECT, UPDATE or DELETE to just the rows meeting a condition. Omit it, and the statement hits every row.
- FIRST
A DAX function available only inside visual calculations. It fetches the value at the start of one axis of the visual's matrix, which makes it handy for comparing each point with the first; its opposite is LAST.
Related terms
- Action center
Remediation steps taken against devices, mailboxes and identities, whether triggered by automated investigations, attack disruption or a person, are gathered on this Microsoft Defender portal page. Pending items can be approved or rejected here, and finished ones reversed.
- Azure Policy as Code
Microsoft's suggested way of managing policy: definitions and initiatives live in source control, and pipelines promote them first with enforcement turned off for testing, then through remediation, and finally with enforcement switched on.
- Compliance check
Reports whether hosts or clusters match their image or baseline in vLCM, altering nothing. Pre-checks, staging and remediation are the later steps.
- Data security objectives
Step-by-step goals in DSPM, for example stopping oversharing or Copilot data exposure. Each comes with its own remediation plan, Security Copilot agents and policies you can create in one click.
- Data Security Posture Management
Brings together DLP, Insider Risk Management and sensitivity-label insights in Microsoft Purview to surface risks to sensitive data, and adds data risk assessments plus remediation for oversharing.
- Defender for Endpoint Plan 2
The top Defender for Endpoint licence, part of Microsoft 365 E5. On top of everything in Plan 1 it brings endpoint detection and response, automatic investigation and remediation, vulnerability management, threat analytics and in-depth file analysis.
- Device groups
You can sort Defender for Endpoint machines into groups using rules that match their name, domain, tag or operating system. Each group gets its own level of automated remediation, and access to its devices can be limited to chosen Entra user groups.
- EmailPostDeliveryEvents
An advanced hunting table of security actions taken on messages once they are already in a mailbox, for instance ZAP or remediation carried out by hand.