From 34b021eb91f5602dca39918e7f0a1b3ec5ebeef8 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 9 Mar 2020 12:21:38 -0700 Subject: [PATCH] Update shadow-protection.md --- .../shadow-protection.md | 31 +++++++++++++++++-- 1 file changed, 29 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-antivirus/shadow-protection.md b/windows/security/threat-protection/windows-defender-antivirus/shadow-protection.md index 500361236e..286f852803 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/shadow-protection.md +++ b/windows/security/threat-protection/windows-defender-antivirus/shadow-protection.md @@ -27,9 +27,36 @@ Shadow protection extends behavioral-based blocking and containment capabilities > [!TIP] > To get the best protection, [deploy Microsoft Defender ATP baselines](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-machines-security-baseline). -## Shadow protection +## Requirements for shadow protection -body + +|Requirement |Details | +|---------|---------| +|Operating system |One of the following:
- Windows 10 (all releases)
- Windows Server 2016 or later | +|Windows E5 enrollment |This is included in Microsoft 365 E5 and in the Identity & Threat Protection offering for Microsoft 365 E3.
See [Components](https://docs.microsoft.com/microsoft-365/enterprise/microsoft-365-overview?view=o365-worldwide#components) and [Features and capabilities for each plan](https://www.microsoft.com/microsoft-365/compare-all-microsoft-365-plans). | + +E5 only feature + + +Windows defender Cloud delivered protection is on (https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/enable-cloud-protection-windows-defender-antivirus) + +To get the best protection value, ensure windows defender is configured to receive regular updates (https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/manage-protection-updates-windows-defender-antivirus) and other essential features such as Behavioral monitoring, IOAV, Tamper Protection etc. + +Windows defender client version (AMProductVersion) 4.18.2001.10 or above + +(Run PowerShell Get-MpComputerStatus in admin mode) + +Windows Defender engine version (AMEngineVersion) 1.1.16700.2 or above + +(Run PowerShell Get-MpComputerStatus in admin mode + +## Turn on shadow protection + +1. Go to the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)) and sign in. + +2. Choose **Settings** > **Advanced features**. + +3. Turn shadow protection on. ## section 1