Merge pull request #5611 from sbreingold-ms/wi-440490-v2-turn-xdr-portal-into-defender-portal

wi-440490-v2-turn xdr-portal-into-defender-portal

Author: mberdugo

defender-endpoint/evaluate-mdav-using-gp.md

@@ -231,7 +231,7 @@ Assign the policies to the OU where the test machines are located.
 
 #### Enable Tamper Protection
 
-In the Microsoft XDR portal (security.microsoft.com), go to **Settings** > **Endpoints** > **Advanced features** > **Tamper Protection** > **On**.
+In the Microsoft Defender portal at [https://security.microsoft.com](https://security.microsoft.com), go to **Settings** > **Endpoints** > **Advanced features** > **Tamper Protection** > **On**.
 
 For more information, see [How do I configure or manage tamper protection?](/defender-endpoint/prevent-changes-to-security-settings-with-tamper-protection).
 

defender-endpoint/ios-configure-features.md

@@ -430,7 +430,7 @@ Defender for Endpoint on iOS enables bulk tagging the mobile devices during onbo
 This configuration is available for both the enrolled (MDM) devices and unenrolled (MAM) devices. Admins can use the following steps to configure the Device tags.
 
 > [!NOTE]
-> Configuring more than one device tags from Intune isn't supported as only one device tag reflects when configured. However, multiple device tags can be added manually in the XDR portal.
+> Configuring more than one device tags from Intune isn't supported as only one device tag reflects when configured. However, multiple device tags can be added manually in the Microsoft Defender portal.
 
 ### Configure device tags using MDM
 

defender-endpoint/review-detected-threats.md

@@ -33,7 +33,7 @@ appliesto:
 
 In the Microsoft Defender portal, you can view and manage threat detections using the following steps:
 
-1. Visit [Microsoft XDR portal](https://security.microsoft.com/) and sign-in.
+1. Visit the Microsoft Defender portal at [https://security.microsoft.com](https://security.microsoft.com) and sign-in.
 
     On the landing page, you see the **Devices with active malware** card with the following information:
 
@@ -68,7 +68,7 @@ You can manage threat detections for any devices that are [enrolled in Microsoft
 
 ## FAQs
 
-#### In the Microsoft XDR portal > Devices with active malware > Devices with malware detections report, why does the Last update seem to be occurring today?
+#### In the Microsoft Defender portal > Devices with active malware > Devices with malware detections report, why does the Last update seem to be occurring today?
 
 To see when the malware was detected, you can take the following steps:
 

defender-for-cloud-apps/app-governance-anomaly-detection-alerts.md

@@ -25,7 +25,7 @@ For more information, see [App governance in Microsoft Defender for Cloud Apps](
 
 ### Finding App Governance Related Alerts
 
-To locate alerts specifically related to App Governance, navigate to the XDR portal Alerts page. In the alerts list, use the "Service/detection sources" field to filter alerts. Set the value of this field to "App Governance" to view all alerts generated by App Governance.
+To locate alerts specifically related to App Governance, navigate to the Microsoft Defender portal Alerts page. In the alerts list, use the "Service/detection sources" field to filter alerts. Set the value of this field to "App Governance" to view all alerts generated by App Governance.
 
 ### General Guidelines
 

defender-for-cloud-apps/applications-inventory.md

@@ -3,7 +3,7 @@ title: Application inventory
 ms.date: 03/20/2025
 ms.topic: overview
 ms.reviewer: anandd512
-description: The new Applications page located under Assets in Microsoft Defender XDR portal provides a centralized location for users to view and manage SaaS and SaaS connected OAuth apps information across their environment, ensuring optimal visibility and a comprehensive experience
+description: The new Applications page located under Assets in the Microsoft Defender portal provides a centralized location for users to view and manage SaaS and SaaS connected OAuth apps information across their environment, ensuring optimal visibility and a comprehensive experience
 #customer intent: As a security administrator, I want to discover, monitor, and manage all SaaS and OAuth connected apps in my organization so that I can ensure security and compliance.
 ---
 # Applications inventory 

defender-for-cloud-apps/attack-paths.md

@@ -49,7 +49,7 @@ Microsoft Defender for Cloud Apps defines a set of critical privilege OAuth perm
 
 To view the full list of permissions, go to the  [Microsoft Defender portal](https://security.microsoft.com) and navigate to Settings > Microsoft Defender XDR > Rules > Critical asset management.
 
-:::image type="content" source="media/saas-securty-initiative/screenshot-of-the-critical-asset-management-page.png" alt-text="Screenshot of the Critical asset management page in the Defender XDR portal." lightbox="media/saas-securty-initiative/Screenshot-of-the-critical-asset-management-page.png":::
+:::image type="content" source="media/saas-securty-initiative/screenshot-of-the-critical-asset-management-page.png" alt-text="Screenshot of the Critical asset management page in the Microsoft Defender portal." lightbox="media/saas-securty-initiative/Screenshot-of-the-critical-asset-management-page.png":::
 
 
 ## Investigation user flow: View attack paths involving OAuth applications

defender-for-cloud-apps/ops-guide/ops-guide-ad-hoc.md

@@ -23,7 +23,7 @@ If you're experiencing issues with a cloud service, we recommend checking servic
 
 ## Run advanced hunting queries
 
-**Where**: In the Microsoft Defender XDR Portal, select **Hunting > Advanced hunting** and query for Defender for Cloud Apps data.
+**Where**: In the Microsoft Defender portal at [https://security.microsoft.com](https://security.microsoft.com), select **Hunting > Advanced hunting** and query for Defender for Cloud Apps data.
 
 **Persona**: SOC analysts
 
@@ -90,7 +90,7 @@ AccountDisplayName,GroupName
 
 ## Review file quarantines
 
-**Where**: In the Microsoft Defender XDR Portal, select **Cloud apps > Files**. Query for items where **Quarantined** = **True**.
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select **Cloud apps > Files**. Query for items where **Quarantined** = **True**.
 
 **Persona**: Compliance administrators
 
@@ -102,7 +102,7 @@ For more information, see [Understand how quarantine works](../use-case-admin-qu
 
 ## Review app risk scores
 
-**Where**: In the Microsoft Defender XDR Portal, select **Cloud apps > Cloud app catalog**.
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select **Cloud apps > Cloud app catalog**.
 
 **Persona**: Compliance administrators
 
@@ -114,7 +114,7 @@ For more information, see [Find your cloud app and calculate risk scores](../ris
 
 ## Delete cloud discovery data
 
-**Where**: In the Microsoft Defender XDR Portal, select **Settings > Cloud apps > Cloud Discovery > Delete Data**.
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select **Settings > Cloud apps > Cloud Discovery > Delete Data**.
 
 **Persona**: Compliance administrators
 
@@ -129,7 +129,7 @@ For more information, see [Deleting cloud discovery data](../discovered-apps.md#
 
 ## Generate a cloud discovery executive report
 
-**Where**: In the Microsoft Defender XDR Portal, select **Cloud apps > Cloud discovery > Dashboard > Actions**
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select **Cloud apps > Cloud discovery > Dashboard > Actions**
 
 **Persona**: Compliance administrators
 
@@ -139,7 +139,7 @@ For more information, see [Generate cloud discovery executive report](../discove
 
 ## Generate a cloud discovery snapshot report
 
-**Where**: In the Microsoft Defender XDR Portal, select **Cloud apps > Cloud discovery > Dashboard > Actions**
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select **Cloud apps > Cloud discovery > Dashboard > Actions**
 
 **Persona**: Security and Compliance administrators
 

defender-for-cloud-apps/ops-guide/ops-guide-daily.md

@@ -83,7 +83,7 @@ For more information, see:
 
 ## Review threat detection data
 
-**Where**: In the Microsoft Defender XDR Portal, select:
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select:
 
 - **Incidents & alerts**
 - **Cloud apps > Policies > Policy management > Threat Detection**
@@ -107,7 +107,7 @@ Make sure to create the threat protection policies needed by your organization,
 
 ## Review application governance
 
-**Where**: In the Microsoft Defender XDR Portal, select:
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select:
 
 - **Incidents & alerts**
 - **Incidents & alerts / App governance**
@@ -126,7 +126,7 @@ For more information, see:
 
 ### Check app governance overview page 
 
-**Where**: In the Microsoft Defender XDR Portal, select:
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select:
 
 - **Incidents & alerts**
 - **Cloud apps > App governance > Overview**
@@ -152,7 +152,7 @@ For more information, see:
 
 ### Review OAuth app data
 
-**Where**: In the Microsoft Defender XDR Portal, select:
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select:
 
 - **Incidents & alerts**
 - **Cloud apps > App governance > Microsoft 365**
@@ -169,7 +169,7 @@ For more information, see:
 
 ### Create and manage app governance policies
 
-**Where**: In the Microsoft Defender XDR Portal, select **Cloud apps > App governance > Policies**
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select **Cloud apps > App governance > Policies**
 
 **Persona**: Security administrators
 
@@ -182,7 +182,7 @@ For more information, see:
 
 ## Review Conditional Access app control
 
-**Where**: In the Microsoft Defender XDR Portal, select:
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select:
 
 - **Incidents & alerts**
 - **Cloud apps > Policies > Policy Management > Conditional Access**
@@ -212,7 +212,7 @@ For more information, see [Review alerts and incidents](#review-alerts-and-incid
 
 ## Review shadow IT - cloud discovery
 
-**Where**: In the Microsoft Defender XDR Portal, select:
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select:
 
 - **Incidents & alerts**
 - **Cloud apps > Cloud discovery / Cloud app catalog**
@@ -245,7 +245,7 @@ For more information, see [Discovered app filters and queries in Microsoft Defen
 
 ## Review the cloud discovery dashboard
 
-**Where**: In the Microsoft Defender XDR Portal, select **Cloud apps > Cloud discovery > Dashboard**.
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select **Cloud apps > Cloud discovery > Dashboard**.
 
 **Persona**: Security and Compliance administrators, SOC analysts
 
@@ -277,7 +277,7 @@ For more information, see:
 
 ## Review information protection
 
-**Where**: In the Microsoft Defender XDR Portal, select:
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select:
 
 - **Incidents & alerts**
 - **Cloud apps > Files**

defender-for-cloud-apps/ops-guide/ops-guide-monthly.md

@@ -13,7 +13,7 @@ Monthly activities can be performed more frequently or as needed, depending on y
 
 ## Review policy assessments
 
-**Where**: In the Microsoft Defender XDR Portal, select **Cloud apps > Policies > Policy management**
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select **Cloud apps > Policies > Policy management**
 
 **Persona**: Security and Compliance administrators
 
@@ -33,7 +33,7 @@ For more information, see [Control cloud apps with policies](../control-cloud-ap
 
 ## Review activity logs
 
-**Where**: In the Microsoft Defender XDR Portal, under **Cloud apps**, select **Activity log**.
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), under **Cloud apps**, select **Activity log**.
 
 **Persona**: Security and Compliance administrators
 

defender-for-cloud-apps/ops-guide/ops-guide-weekly.md

@@ -11,7 +11,7 @@ This article lists weekly operational activities that we recommend you perform w
 
 ## Review SaaS security posture management
 
-**Where**: In the Microsoft Defender XDR Portal, select **Secure Score**.
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select **Secure Score**.
 
 **Persona**: Security and Compliance administrators, SOC analysts
 
@@ -23,7 +23,7 @@ To view Secure Score recommendations per product, in Microsoft Defender XDR, sel
 
 ## Check app connectors, log collectors, and SIEM agent health
 
-**Where**: In the Microsoft Defender XDR Portal, select **Settings > Cloud apps**.
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), select **Settings > Cloud apps**.
 
 **Persona**: Security and Compliance administrators, SOC analysts
 
@@ -59,7 +59,7 @@ For more information, see [Track new and changed features in the Microsoft 365 M
 
 ## Review the governance log
 
-**Where**: In the Microsoft Defender XDR Portal, under **Cloud apps**, select **Governance log**.
+**Where**: In the [Microsoft Defender portal](https://security.microsoft.com), under **Cloud apps**, select **Governance log**.
 
 **Persona**: Security and Compliance administrators