Windows 10: Microsoft Defender Endpoint Application Control

Hi all,I would like to find out if MDE application control is capable of the following:-Monitoring of process launch attempts Can processes be blockCan processes be defined by fingerprint/hash Process exclusion based on argument regex string File read/create/delete/write attempt monitoring Is DLL Load monitoring possibleCan processes be monitored whilst allowing further rules to be analyzed continue processing other rules Can log events including severity Can notify user of policy actionsCan processes be monitored based on wildcard expressions Any help is much appreciated, thank you.

:)

 

Microsoft Defender for Endpoint on iOS is now generally available

Source: https://techcommunity.microsoft.com/...e/ba-p/1962420


Download: Microsoft Defender ATP on the App Store

 

Windows Defender vs. "cleaner or optimizer applications"

No one usually publicly says what AV they use. But, oh well, my own. 2k+ endpoints. Last bad experience was... 2.5 years ago, IIRC.
Microsoft itself? 130k, if I am not mistaken. Eating their own dogfood on a massive scale.

You can also check r/sysadmin. The topic about what AV do you run floats around pretty often, someone always mentions Defender (or, well, mostly SCEP due to SCCM use, which is the same Defender, just controlled centrally).

 

I would like to remove device from Microsoft Defender for Endpoint portal

I would like to remove device from Microsoft Defender for Endpoint portal without running any script on the end PC. The end PC is no more active but still showing in the ATP Portal. Need suggestion