deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-25 07:13:37 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Update detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md

Browse Source 
Changed double-tick to single, as per suggestion. 
Added blank line around codefencing
This commit is contained in:
Thomas Lee
2021-01-31 22:21:20 +00:00
committed by GitHub
parent b7d0e0f861
commit 40589e437f
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
windows/security/threat-protection/microsoft-defender-antivirus/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md
View File

@ -134,14 +134,18 @@ For System Center 2012 Configuration Manager, see [How to Deploy Potentially Unw
##### To enable PUA protection ##### To enable PUA protection
```PowerShell ```PowerShell
Set-MpPreference -PUAProtection Enabled Set-MpPreference -PUAProtection Enabled
``` ```
Setting the value for this cmdlet to `Enabled` turns the feature on if it has been disabled. Setting the value for this cmdlet to `Enabled` turns the feature on if it has been disabled.
##### To set PUA protection to audit mode ##### To set PUA protection to audit mode
```PowerShell ```PowerShell
Set-MpPreference -PUAProtection AuditMode Set-MpPreference -PUAProtection AuditMode
``` ```
Setting `AuditMode` detects PUAs without blocking them. Setting `AuditMode` detects PUAs without blocking them.
@ -150,7 +154,9 @@ Setting `AuditMode` detects PUAs without blocking them.
We recommend keeping PUA protection turned on. However, you can turn it off by using the following cmdlet: We recommend keeping PUA protection turned on. However, you can turn it off by using the following cmdlet:
```PowerShell ```PowerShell
Set-MpPreference -PUAProtection Disabled Set-MpPreference -PUAProtection Disabled
``` ```
Setting the value for this cmdlet to `Disabled` turns the feature off if it has been enabled. Setting the value for this cmdlet to `Disabled` turns the feature off if it has been enabled.
@ -160,7 +166,8 @@ See [Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus](u
PUA events are reported in the Windows Event Viewer, but not in Microsoft Endpoint Manager or in Intune. PUA events are reported in the Windows Event Viewer, but not in Microsoft Endpoint Manager or in Intune.
You can also use the ``Get-MpThreat`` cmdlet to view threats that Defender handled. You can also use the `Get-MpThreat` cmdlet to view threats that Defender handled.
```console ```console
CategoryID : 27 CategoryID : 27