Showing posts with label Microsoft Defender. Show all posts
Showing posts with label Microsoft Defender. Show all posts

Monday, February 9, 2026

Microsoft Defender Hardening for Windows 11

Microsoft Defender Hardening:

Home:
PS C:\Windows\system32> Set-MpPreference -SignatureUpdateInterval 1

PS C:\Windows\system32> Set-MpPreference -CheckForSignaturesBeforeRunningScan 1

PS C:\Windows\system32> Set-MpPreference -MAPSReporting Advanced -SubmitSamplesConsent SendSafeSamples -CloudBlockLevel High -CloudExtendedTimeout 50
PS C:\Windows\system32> Set-MpPreference -PUAProtection Enabled
PS C:\Windows\system32> Set-MpPreference -EnableNetworkProtection Enabled


MAPS、Cloud Protection 和 PUA 在家用版上是完全有效

Pro/Enterprise:
Able to add ASR Rule:
系統限制:ASR 規則在 Windows 10/11 專業版 (Pro) 上可部分運行,但官方正式支援為 企業版 (Enterprise)。
前置要求:必須將 Microsoft Defender 設為主要防毒軟體,且開啟即時防護與雲端傳送防護。

Reference:

Print Friendly and PDF
Share/Bookmark

Wednesday, December 31, 2025

How to install Microsoft Intune with Microsoft Defender and Intune VPN on Redmi Pad SE 8.7?

The Redmi Pad SE 8.7 which is running on Xiaomi HyperOS 2.x which is Android 15.

When you deploy the "Android For Work" (Personally-Owned Work Profile) ("BYOD") on it. You may hit the permission issue on the Microsoft Defender and cannot trigger the VPN connection.

To resolve this issue, you need to manual grant those permission when you register your device via the app "intune company portal".

There are three steps of the registration:

Step 1: Login and create profile
Step 2: Device registration during this stage, the Microsoft defender will installed to your tablet.
(Do not click the "resolve" of the defender items, it will trigger you to open the app and login the app.

After complete all the above permission grant, click "resolve in steps 2" to continues step 2 setup.

You will request to login your O365/M65 account in your "Microsoft Defender" (Just click your email address, no need to enter username and password.

After that you will able to complete all the setup.

Print Friendly and PDF
Share/Bookmark

Wednesday, November 1, 2023

Freeware to enhance Microsoft Defender Security (Windows 10 and 11)

Microsoft Defender User need to consider to use DefenderUI or Configuredender to enhance your security since they able to enable many hidden security features of Microsoft Defender.

More detail:
DefenderUI (Need to install) and Configuredefender (No need to install)

Print Friendly and PDF
Share/Bookmark

Saturday, October 14, 2023

Microsoft Defender Plan 1 plus Trellix Endpoint (formerly McAfee Mvision) and with Microsoft Defender Plan 2

M365 E3 users entitle to MS Defender Plan 1. There are TWO Options to enhance the endpoint security if you would like to leveage Microsoft Defender:


Option 1: MS Defender Plan 1 + Trellix Endpoint


Option 2: Upgrade to MS Defender Plan 2


Reference:


Microsoft Defender for Endpoint Plan 1 Now Included in M365 E3/A3 Licenses

https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/microsoft-defender-for-endpoint-plan-1-now-included-in-m365-e3/ba-p/3060639

 

Trellix Endpoint (formerly McAfee Mvision) enhances protection on your Microsoft Windows 10 and Microsoft Windows Server 2016 (and later) endpoints.

Key features (trellix.com)

Trellix Support Community - Difference between MVISION Endpoint and Endpoint S... - Support Community


Print Friendly and PDF
Share/Bookmark

Thursday, December 15, 2022

CVE-2022-37971 - Security Update Guide - Microsoft - Microsoft Windows Defender Elevation of Privilege Vulnerability

If your Windows Defender engine version is 1.1.19700.2 or above, you will be save from CVE-2022-37971

 

 

 

Reference:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37971 

 

https://www.neowin.net/news/microsoft-defender-avast-avg-turned-against-windows-to-permanently-delete-files/

 

Print Friendly and PDF
Share/Bookmark

Monday, March 14, 2022

Microsoft Defender - enable Microsoft Active Protection Service (MAPS) on Windows 11 Pro

  1. Go to Local Group Policy Editor (GPedit.msc)
  2. Computer Configuration -> Administrative template -> Windows  Components -> Microsoft Windows Defender Antivirus  -> MAPS
  3. Join Micrsoft MAPS - Enable - Advanced MAPS

  1. Enable the following policy:

 

 

  1. Reboot your machine.

 

  1. Check the running configuration of the MAPS:

Open Powershell

Run the command: get-mppreference

PS C:\WINDOWS\system32> get-mppreference

 

The MAPSReporting - "2"

 

Reference:

加固 Windows Defender ,开启微软云保护,利用「微软高级保护服务」(MAPS)来实时预防未知病毒 - 小众软件

https://www.appinn.com/windows-defender-enable-microsoft-maps/

 

"著名黑客 h0ek 教路,只需在 Windows Defender 加上一點就可以得到企業級的保護 - Qooah" https://qooah.com/2022/03/14/famous-hacker-h0ek-teaches-the-way-to-get-enterprise-grade-protection-with-just-a-little-bit-of-windows-defender/ 

 

Print Friendly and PDF
Share/Bookmark