Findings
Generator
Configuration
Lucidum Reverse
Architecture
Statistics
← All Findings
Vendor:
Microsoft Defender for Endpoint
FIN-262
Weight:
5
4
3
2
1
Confidence:
High
Medium
Low
Edited:
2026-03-06 09:03
Verified
What It Detects
A device designated as High value in Microsoft Defender for Endpoint also has a High exposure level. High-value devices are critical assets (e.g., domain controllers, financial systems, executive workstations) that have been explicitly marked for prioritized protection. A high exposure level on these devices indicates unpatched vulnerabilities or misconfigurations that directly threaten the organization's most important assets.
MITRE ATT&CK Techniques
Comma-separated, e.g. T1078, T1190
Checks
read-only
Field
Operator
Value
deviceValue
equals
High
exposureLevel
equals
High
Remediation
×
×
×
×
+ Add item
Why It Matters
×
×
×
+ Add item
Save Changes
Export Lucidum