Every unique canonical console page is captured from UEC development build v7.6.0 after a clean pod redeploy in both light and dark themes at 1600×1000. Query-string variants, legacy aliases and redirect-only addresses are deliberately not captured twice.

The replacement set uses one authenticated browser tab. Each page waits 15 seconds after navigation; the console’s real light/dark switch is then activated on that page, the opposite switch label is verified, and both theme screenshots are saved. This gives live AMTD views time to load without triggering authentication rate limits or redirect bursts. The signed-out login page is captured first with its own theme switch; the same browser session then signs in once for the authenticated page pass.

Counts

• Console pages: 94 unique canonical routes × 2 themes = 188 screenshots
• Architecture diagrams: 10 product diagrams

Page inventory

AMTD risk management

Page	Canonical path	Light	Dark
Amtd Protected Devices	/amtd/devices	Light	Dark
Amtd Incidents	/amtd/incidents	Light	Dark
Amtd Host Inventory	/amtd/hosts/inventory	Light	Dark
Amtd Host Vulnerabilities	/amtd/hosts/host-vulnerabilities	Light	Dark
Amtd Host Security Configuration	/amtd/hosts/security-configuration	Light	Dark
Amtd Vulnerabilities Applications	/amtd/vulnerabilities/application	Light	Dark
Amtd Vulnerabilities Cves	/amtd/vulnerabilities/cve	Light	Dark
Amtd Misconfigurations	/amtd/security-misconfiguration	Light	Dark
Amtd Security Controls Operational	/amtd/security-controls/operational	Light	Dark
Amtd Security Controls Unmanaged	/amtd/security-controls/unmanaged	Light	Dark
Amtd Security Controls Version	/amtd/security-controls/version	Light	Dark
Amtd High Risk Software	/amtd/high-risk-software	Light	Dark
Amtd End Of Life Software	/amtd/software-eol	Light	Dark
Amtd Identity Logon Accounts	/amtd/identity-exposure/logon-accounts	Light	Dark
Amtd Identity High Privilege Hosts	/amtd/identity-exposure/high-privilege-hosts	Light	Dark
Amtd Identity Service Accounts	/amtd/identity-exposure/service-accounts	Light	Dark
Amtd Network Services	/amtd/network-services	Light	Dark
Amtd Risk History	/amtd/risk-history	Light	Dark
Amtd Data Exfiltration	/amtd/data-exfiltration	Light	Dark
Amtd Ai Usage Ai Tool	/amtd/ai-usage-control/ai-tool	Light	Dark
Amtd Ai Usage Accounts	/amtd/ai-usage-control/accounts	Light	Dark
Amtd Ai Usage Hosts	/amtd/ai-usage-control/hosts	Light	Dark
Amtd Ai Usage Mcp Connectors	/amtd/ai-usage-control/mcp-connectors	Light	Dark
Amtd Software Applications	/amtd/software/software-applications	Light	Dark
Amtd Software Extensions	/amtd/software/software-extensions	Light	Dark
Amtd Software Processes	/amtd/software/software-processes	Light	Dark

Administration

Page	Canonical path	Light	Dark
Administration Settings	/settings	Light	Dark
Administration Directory Groups	/groups	Light	Dark
Administration Entra Groups	/entra-groups	Light	Dark
Administration About	/about	Light	Dark
Administration Faq	/faq	Light	Dark

Application control

Page	Canonical path	Light	Dark
App Control Policies	/policies	Light	Dark
App Control Policy Validation	/policies/validate	Light	Dark
Discovery Scan New	/policies/wdac-supplemental/new	Light	Dark
Discovery Scan Runs	/policies/wdac-supplemental/scans	Light	Dark
File Identities	/file-identities	Light	Dark
Software Catalog	/software-catalog	Light	Dark
App Control Deployment History	/deployments	Light	Dark
Windows Base Policy Builder	/win/base-policy-builder	Light	Dark
Windows Supplement Policy Builder	/win/supplement-policy-builder	Light	Dark
File Integrity Change Rules	/fim/change-rules	Light	Dark
App Control Intelligence	/uec-intelligence	Light	Dark

Endpoint management

Page	Canonical path	Light	Dark
Devices	/devices	Light	Dark
Device Groups	/device-groups	Light	Dark
Agent Deployment	/agent-versions	Light	Dark
Tool Deployment	/tools	Light	Dark
Advance Telemetry Configuration	/tools/configurations/advance-telemetry	Light	Dark
Fluent Bit Configuration	/tools/configurations/fluent-bit	Light	Dark
Agent Intelligence	/agent-intel	Light	Dark
Agent Configuration	/agent-config	Light	Dark

Getting started and reporting

Page	Canonical path	Light	Dark
Dashboard	/	Light	Dark
Reports	/reports	Light	Dark
Reports History	/reports/history	Light	Dark
Reports Builder	/reports/builder	Light	Dark
Reports Dashboards	/reports/dashboards	Light	Dark
Signed-out login	/login	Light	Dark

Monitoring and detection

Page	Canonical path	Light	Dark
Events	/events	Light	Dark
Alerts	/alerts	Light	Dark
Threat Detection	/threat-detection	Light	Dark
Threat Detection Coverage	/threat-detection/coverage	Light	Dark
Threat Detection Detections	/threat-detection/detections	Light	Dark
Threat Detection Iocs	/threat-detection/iocs	Light	Dark
Threat Detection Packs	/threat-detection/packs	Light	Dark
Threat Detection Quarantine	/threat-detection/quarantine	Light	Dark
Threat Detection Rules	/threat-detection/rules	Light	Dark
Threat Detection Settings	/threat-detection/settings	Light	Dark
Behavior Analytics	/ueba	Light	Dark
Behavior Analytics Anomalies	/ueba/anomalies	Light	Dark
Behavior Analytics Coverage	/ueba/coverage	Light	Dark
Behavior Analytics Detectors	/ueba/detectors	Light	Dark
Behavior Analytics Identities	/ueba/identities	Light	Dark
Behavior Analytics Suppressions	/ueba/suppressions	Light	Dark
Sandbox	/sandbox	Light	Dark
Audit Log	/audit-logs	Light	Dark

Other routes

Page	Canonical path	Light	Dark
Alert Rules	/alerts/rules	Light	Dark
Defender Hunting	/mde-hunting	Light	Dark
Policy Diagnostics	/appctrl-tools	Light	Dark

Response and security controls

Page	Canonical path	Light	Dark
Response Actions	/active-response	Light	Dark
Domain Blocklist	/global-block-domain	Light	Dark
Defender Baselines	/defender-policy	Light	Dark
Host Firewall	/firewall-policy	Light	Dark
Macos Security	/macos-native-security	Light	Dark
Compliance Overview	/compliance	Light	Dark
Compliance Benchmarks	/compliance/benchmarks	Light	Dark
Compliance Runs	/compliance/runs	Light	Dark
Compliance Exceptions	/compliance/exceptions	Light	Dark
Compliance Content Sources	/compliance/sources	Light	Dark
Just In Time Access	/jit	Light	Dark
Forensic Queries	/forensics	Light	Dark
Live Response	/live-response	Light	Dark
Windows Features	/windows-features	Light	Dark
Certificates	/certificates	Light	Dark
Learn App Control Vs Applocker	/learn/appctrl-vs-applocker	Light	Dark
Learn Windows Security Events	/learn/windows-security-events	Light	Dark

Why alias routes are omitted

The source application contains compatibility routes that immediately redirect to a canonical destination. Capturing those aliases produces the same screenshot, extra redirects, and additional server traffic. The manifest records the canonical destination once.

Omitted address	Reason
/amtd, /amtd/dashboard, AMTD index tab aliases	Redirect to the dashboard or the canonical child tab
/policies/wdac-supplemental	Redirects to /policies/wdac-supplemental/scans
/policies/create	Legacy route for the creation sheet now hosted by the canonical Policies page
/policies/editor without an id	Redirects to Policies; a real editor view requires a policy id
/tools/advance-telemetry, /tools/configurations	Redirect to Tools or a specific configuration editor
/compliance/rules	Rules live inside a benchmark; redirects to Benchmarks
?view= variants of Policies, Devices, Software Catalog and Agent Deployment	Same page with a different tab/filter state
Settings ?tab=…&section=… addresses	Query-string sections of the canonical Settings page
Auth callback, consent, forced-password-change and unauthorized helper routes	Not tenant console destinations in an authenticated pass

Some AMTD pages normalize the browser address while replacing filter/sort query state. The capture log records that final URL, but the manifest intentionally names the stable console entry path.

Source directories

• images/light/pages/ and images/dark/pages/ — unique page captures in both themes
• images/diagrams/ — architecture and lifecycle diagrams

Screenshots are evidence from UEC development build v7.6.0 after a clean pod redeploy on 2026-10-22. Counts, hostnames and users change with tenant data.