From e0f0a32c792e8279e1a88f6789c1a8a5be41fcf6 Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Wed, 5 Aug 2020 15:36:17 -0700 Subject: [PATCH 1/2] Release notes for 101.05.16 --- .../microsoft-defender-atp/mac-resources.md | 30 +++++++++++++++++++ .../microsoft-defender-atp/mac-whatsnew.md | 6 ++++ 2 files changed, 36 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md b/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md index 602205a4ae..bfa2d7bd61 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md @@ -100,6 +100,36 @@ Important tasks, such as controlling product settings and triggering on-demand s |EDR |Add group tag to device. EDR tags are used for managing device groups. For more information, please visit https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/machine-groups |`mdatp --edr --set-tag GROUP [name]` | |EDR |Remove group tag from device |`mdatp --edr --remove-tag [name]` | +### How to enable autocompletion + +To enable autocompletion in `Bash`, run the following command and restart the Terminal session: + +```bash +$ echo "source /Applications/Microsoft\ Defender\ ATP.app/Contents/Resources/Tools/mdatp_completion.bash" >> ~/.bash_profile +``` + +To enable autocompletion in `zsh`: + +- Check whether autocompletion is enabled on your device: + + ```zsh + $ cat ~/.zshrc | grep autoload + ``` + +- If the above command does not produce any output, you can enable autocompletion using the following command: + + ```zsh + $ echo "autoload -Uz compinit && compinit" >> ~/.zshrc + ``` + +- Run the following command to enable autocompletion for Microsoft Defender ATP for Mac and restart the Terminal session: + + ```zsh + sudo mkdir -p /usr/local/share/zsh/site-functions + + sudo ln -svf "/Applications/Microsoft Defender ATP.app/Contents/Resources/Tools/mdatp_completion.zsh" /usr/local/share/zsh/site-functions/_mdatp + ``` + ## Client Microsoft Defender ATP quarantine directory `/Library/Application Support/Microsoft/Defender/quarantine/` contains the files quarantined by `mdatp`. The files are named after the threat trackingId. The current trackingIds is shown with `mdatp --threat --list --pretty`. diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md index 0a442a8808..4b48c8771f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md @@ -38,6 +38,12 @@ ms.topic: conceptual > 2. Refer to this documentation for detailed configuration information and instructions: [New configuration profiles for macOS Catalina and newer versions of macOS](mac-sysext-policies.md). > 3. Monitor this page for an announcement of the actual release of MDATP for Mac agent update. +## 101.05.16 + +- Improvements to quick scan logic to significantly reduce the number of scanned files +- Added [autocompletion support](mac-resources.md#how-to-enable-autocompletion) for the command-line tool +- Bug fixes + ## 101.03.12 - Performance improvements & bug fixes From c2ff67d89d6eedbe78a8c3b7a8607f2c0e0e7cb8 Mon Sep 17 00:00:00 2001 From: Tudor Dobrila Date: Wed, 5 Aug 2020 15:42:00 -0700 Subject: [PATCH 2/2] Style --- .../threat-protection/microsoft-defender-atp/mac-resources.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md b/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md index bfa2d7bd61..eb1a1339c6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-resources.md @@ -25,7 +25,7 @@ ms.topic: conceptual ## Collecting diagnostic information -If you can reproduce a problem, please increase the logging level, run the system for some time, and restore the logging level to the default. +If you can reproduce a problem, increase the logging level, run the system for some time, and restore the logging level to the default. 1. Increase logging level: @@ -63,7 +63,7 @@ The detailed log will be saved to `/Library/Logs/Microsoft/mdatp/install.log`. I ## Uninstalling -There are several ways to uninstall Microsoft Defender ATP for Mac. Please note that while centrally managed uninstall is available on JAMF, it is not yet available for Microsoft Intune. +There are several ways to uninstall Microsoft Defender ATP for Mac. Note that while centrally managed uninstall is available on JAMF, it is not yet available for Microsoft Intune. ### Interactive uninstallation