From 185d48d92b62dfc5086438fbce6ee2a6c43ea917 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 31 Aug 2018 11:13:32 -0700 Subject: [PATCH] add automation level in auto ir --- ...investigations-windows-defender-advanced-threat-protection.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/windows-defender-atp/automated-investigations-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/automated-investigations-windows-defender-advanced-threat-protection.md index aa999d91d8..a1c25550d8 100644 --- a/windows/security/threat-protection/windows-defender-atp/automated-investigations-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/automated-investigations-windows-defender-advanced-threat-protection.md @@ -61,6 +61,7 @@ You can configure the following levels of automation: Automation level | Description :---|:--- +Not protected | Machines will not get any automated investigations run on them. Semi - require approval for any remediation | This is the default automation level.

An approval is needed for any remediation action. Semi - require approval for non-temp folders remediation | An approval is required on files or executables that are not in temporary folders.

Files or executables in temporary folders, such as the user's download folder or the user's temp folder, will automatically be remediated if needed. Semi - require approval for core folders remediation | An approval is required on files or executables that are in the operating system directories such as Windows folder and Program files folder.

Files or executables in all other folders will automatically be remediated if needed.