added link to blog in intro

This commit is contained in:
Justin Hall 2018-12-14 11:06:04 -08:00
parent 5eda797f14
commit 43c3d803c2

View File

@ -32,6 +32,8 @@ Windows Defender ATP provides multiple monitoring and control features for USB p
> [!NOTE]
> These threat reduction measures help prevent malware from coming into your environment. To protect enterprise data from leaving your environment, you can also configure data loss prevention measures. For example, on Windows 10 devices you can configure [BitLocker](https://docs.microsoft.com/windows/security/information-protection/bitlocker/bitlocker-overview) and [Windows Information Protection](https://docs.microsoft.com/windows/security/information-protection/windows-information-protection/create-wip-policy-using-intune-azure), which will encrypt company data even if it is stored on a personal device, or use the [Storage/RemovableDiskDenyWriteAccess CSP](https://docs.microsoft.com/windows/client-management/mdm/policy-csp-storage#storage-removablediskdenywriteaccess) to deny write access to removable disks.
For more information about controlling USB devices, see the [Microsoft Secure blog](https://cloudblogs.microsoft.com/microsoftsecure/).
## Prevent threats from removable storage
Windows Defender ATP can help identify and block malicious files on allowed removeable storage peripherals.