Findings
Generator
Configuration
Lucidum Reverse
Architecture
Statistics
← All Findings
Vendor:
Microsoft Defender for Endpoint
FIN-251
Weight:
5
4
3
2
1
Confidence:
High
Medium
Low
Edited:
2026-03-06 09:04
Verified
What It Detects
Device is both internet-facing and has a High exposure level in Microsoft Defender TVM. This compound condition represents maximum exploitation risk: the device is directly reachable from the internet and has significant unpatched vulnerabilities. Attackers actively scan for and exploit internet-facing devices with known vulnerabilities.
MITRE ATT&CK Techniques
Comma-separated, e.g. T1078, T1190
Checks
read-only
Field
Operator
Value
exposureLevel
equals
High
isInternetFacing
equals
True
Remediation
×
×
×
×
×
+ Add item
Why It Matters
×
×
×
+ Add item
Save Changes
Export Lucidum