From 5242d9ef1e496e891c5b9b16b8bbe6ea99a1e70d Mon Sep 17 00:00:00 2001 From: Tanya Bittenmaster <30839220+tbit0001@users.noreply.github.com> Date: Tue, 19 Sep 2017 09:17:25 -0400 Subject: [PATCH] Update menu items --- .../atp-Application-Guard-events-icon.png | Bin 0 -> 782 bytes .../images/atp-Device-Guard-events-icon.png | Bin 0 -> 767 bytes .../images/atp-ETW--event-icon.png | Bin 0 -> 1415 bytes .../images/atp-Exploit-Guard-events-icon.png | Bin 0 -> 733 bytes .../images/atp-File-location-icon.png | Bin 0 -> 557 bytes .../images/atp-Firewall-events-icon.png | Bin 0 -> 702 bytes .../images/atp-Other-events-icon.png | Bin 0 -> 765 bytes .../images/atp-Smart-Screen-events-icon.png | Bin 0 -> 801 bytes .../atp-access-token-modification-icon.png | Bin 0 -> 738 bytes .../images/atp-cprompt-icon.png | Bin 0 -> 615 bytes .../images/atp-file-creation-icon.png | Bin 0 -> 510 bytes .../images/atp-file-observed-icon.png | Bin 0 -> 486 bytes .../images/atp-memory-allocation-icon.png | Bin 0 -> 1886 bytes .../images/atp-module-load-icon.png | Bin 0 -> 757 bytes .../atp-network-communications-icon.png | Bin 0 -> 686 bytes .../atp-powershell-command-run-icon.png | Bin 0 -> 544 bytes .../images/atp-process-event-icon.png | Bin 0 -> 895 bytes .../images/atp-process-injection.png | Bin 0 -> 897 bytes .../images/atp-registry-event-icon.png | Bin 0 -> 553 bytes .../images/atp-respond-action-icon.png | Bin 0 -> 936 bytes .../images/atp-signer-icon.png | Bin 0 -> 633 bytes .../atp-windows-defender-av-events-icon.png | Bin 0 -> 678 bytes ...atp-windows-defender-not-detected-icon.png | Bin 0 -> 772 bytes ...ows-defender-advanced-threat-protection.md | 21 ++++++++++++++++-- 24 files changed, 19 insertions(+), 2 deletions(-) create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-Application-Guard-events-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-Device-Guard-events-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-ETW--event-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-Exploit-Guard-events-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-File-location-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-Firewall-events-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-Other-events-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-Smart-Screen-events-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-access-token-modification-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-cprompt-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-file-creation-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-file-observed-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-memory-allocation-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-module-load-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-network-communications-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-powershell-command-run-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-process-event-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-process-injection.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-registry-event-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-respond-action-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-signer-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-windows-defender-av-events-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-windows-defender-not-detected-icon.png diff --git a/windows/threat-protection/windows-defender-atp/images/atp-Application-Guard-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-Application-Guard-events-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..9cf3188628c1bef9049ec83e142d8bf8260327f2 GIT binary patch literal 782 zcmeAS@N?(olHy`uVBq!ia0vp^GC-`z!3HExy*&LKNO2Z;L>4nJ@ErkR#;MwT(m+A> z5>H=O_J^FpJi=`EpFMQ}3%N#=IF^=VoRC+8#rl@>8I3WG39Vo^Q(O+7WoXYU^ zfAedYGUxo<+|;}hhHq!4?FWjnfs}=0mgJ-|tax`xoq>Vzrl*Tzh)3t!Fx&1|4kEU{ zE1qs?>TT^!5an3ua!KGT6Cv(%ip^C;}=V9({JaP?YuFyi;dyfW5YuRKG$z9dReynM&5SIxTl_* zWArWyryrC!oV9h*yHK%^P|-P`=V&DJ%qhN-Woj8{mU)l){O1f4DM7)DHFo~X{RFk1 lZ_xVJtA4EiLH`5gJxn)U@3Hp@Gl5bUgQu&X%Q~loCIC&mK3@O; literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-Device-Guard-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-Device-Guard-events-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..d59adf267426c89f368607935a590146424604a4 GIT binary patch literal 767 zcmeAS@N?(olHy`uVBq!ia0vp^azL!e!3HGH$w=Px>&|!pg?LJULN2Mr$wiq3C7Jno48oj> z%0O{0khpVxL1j^9dPWJu8vZj@Kv6!hXi;h+NU1_eW^O8j>34okpbRHSCOAK>q&%@G zl_9p^KS((@*znBalAKhA74I&oGcYio@^o;YCUu3cT!93WyYuD(1kv_v?@`@5Lz+j+D7 zc6_g@65o6MVD*C2_MH1wcop^M6x%4(%Pq1K`X?RuTfh2$P4wTIf-4WLj+^-Us7;a?*NgfzY8SV zZoL0~2uMx*x_X1oX^H;hhYA*76lmTrb-i?BgwBIXIis08UQ2~I6zBW>Qmfd0Takk) zXM6OTFzpqqxLgA_+{`hU>ldgYGQn%9gQly|%suipQoRp;+l7R>uD@Pg{!8|FWA1GO z9_FV-Kld3hJo)^Se>yXR!Lb7pzrV=eFG&sZYCV3BMO}!qVqW>i^Dj%9R6M`8Zoa8= z?X_vl_1>Iv8Fohjg}Hw98N&N^s(3nWjBr^R)VS`o1P_}+%beT&$CY^wJFE?>4zEA$ zeMI|n%#8ETH{@Cu0oC!$^2-^M*mA6n8< UcdgP40LC+er>mdKI;Vst07ce3z5oCK literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-ETW--event-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-ETW--event-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..4f4b6bb9219f048f963c0e8825c746afe3b7da48 GIT binary patch literal 1415 zcmXxkdpOg390%}UryXn=jU~4ZR++nHatlR-I;7>Pxf`Y}W;0WmDU?etg&9UvIzr(P zA*Y5R*H)5S5l2geB|?28l`s z%B%VuL6T;GWJe4Spp$6~GBp&ChiZuD!^D1+N{gbC&yg6w1KBaK$NMy$&LSBNTY?feVRwP1aI?`6>-IY~T z4miv6F)uv!dbl1ZR8}h9ubd*C@Uuu`@DcJUl&hGa;%n&3|~*K$dMCGE_B?FalQ-)z;T1y?J!G>I+a6t`xW_RG21vC4$a~wGS!}qvy554A&+)( zHOSR9wAWHd1@SK*LzHqse-`1qV`<;&1778`+D*8m8Ux>iluWQkE50~6A}`<9y3xn90g4@ zI?PPf4uwGR97rUR->XvRKqI9hD`w}@M=aIDv8v!j3TF5V7pPLD=L2!w$cL8%S=~VZ zi9-2Ry;y)XGfo~-P8x5m^$CiI$nnECGMUZwCb0<>Luq90$iju+`CdFUN>5L3GK^{V z&jKMaG0|*~bw5Yn6OYHM=k{*HV6ps_m6c9XMg7?8`)505mb=^AuOuh4dxbrxbev4G zGjnowArS7~-Z?@cQ5y-nQ_o>o=(kei^d*X|M0_rDEZ!{$p{-HZO%JdpHGRIQX(fpNK)U0F;KPK;RHDS0_e$ovXt zN0YDnHN0`}e&DAl(H)o-7Z-O)_SNgx_5lIY-*46FyfU8MtjV>#edN~OmhNn{e&zkK zF_BK?L2#}X5>~jerF!VX{5lN-oGh}m3GRPHd81byMa78jTo<7ic?0OYhFP_vbC4&U TVc1FVzX6==UF@oC{o?-xMOB3I literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-Exploit-Guard-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-Exploit-Guard-events-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..7e8dbce304559ec481ad34af0182f1e144cfbba3 GIT binary patch literal 733 zcmeAS@N?(olHy`uVBq!ia0vp^3P3E!!3HFKxnwkf6lZ})WHAE+-w_aIoT|+y4HRTA z@$_|Nf5<7!BhIwv`IAVnkZVMVV`)i7ei6gUb!R+)LOdlvA(zzRc)B=-cyzvgUNYr265AqCl%zNx_&fTakVC@jV&A_nwD%bA2dPR+8 zyL+7$3dlNmbzXkS;(Pg>-o6N(1yi`@6bmyj7|rCdn(L?15MA|B&Vc9fvpE5rca%?W zO1Nz%k-RXdTH-;0g@Y#RQW3M+ye$Ij!q;C9TpPy7&|_F|Za%-k?6V3j49PsRmMy&g zy0Mt=^rj6ldWKTHK+QadD|i_`+kfP?&<^MmlcNF)fZSMS7QS;QYulZ$3m)qjT5UsDXSUNhEOj+{Us&sek zcTfG~=7S0axlMokkCw}N$Q*avf4{sw=Ji*pr$skwMQgwIu+(MQ&7ZvP^_IJN&S&eR km;yzAcfR2L!1jY_=9ANf8jMw6fU(Hn>FVdQ&MBb@0NI8i*#H0l literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-File-location-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-File-location-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..40838935bed5d38842c1c760adbbd713e00be9e0 GIT binary patch literal 557 zcmeAS@N?(olHy`uVBq!ia0vp^azHG_!3HE3EPS&CNO2Z;L>4nJ@ErkR#;MwT(m+A> z5>H=O_J^FpJlYCUC3l>_Laq@dj-@3T`9%yX*PZbI3h|Txg;oF&M`+;I?AY~z$B{``KE8bmF2a5dgba4#v=zM!^|U&~_@mSs9|FnYawH0$uu`PudTO=u<5X=vX`mo` ziKnkC`$JA)9%;#0=1DujLaq@dj-@3T`9%yX*PZbI3h|TxghfWjH}H!TD(=<%vb9 z46z0OLCU$ohG!Nh=OhA^7BOr;u%#a;%mES(Pb|vI%u8oDApNWzD8>%aUs{x$%JB7n z^J|zg=ltB<)VvagZ)c|M2a2(Ql!auLwjjNgsMB4tx zS=|afv1abl9n`W5TQfl~N?d#)f8xT)wamMZox2$M{f?%P;lxu!-5ZM}~_ z-uSie{o@j=gPYdGz5D(5*w?C~Pm35CTmqNO?GW1$wRXepw^oLyH&q$lY$@A)_ZYKe zGRNT!!qql%6?^0M-dVMZVZqt-o`Z#R3J)yHobbHzb-tPOl+?~mI*yvHi4qDeB_$K@ zoAl;I*cR-KQ|?P%T4o{hz@qO{07tFKhIQFC^ZnO`g73qiYLm|6b+5PWdtPb7!Ib*${*FwBhM-%w|7dhg zF;)BK^CZ~o_;jG9bNz~b*X?f>xYT*F`k2IJ-qq|vPFs%Ko&S7r(}dUGlNY>NHqn%! z`PYj0tXXOtinnHVNvC<3`v$MnUE+S_&yg98#szHu`f8a~Uw@Nmxw5et7)=bGu6{1- HoD!M`sfLr!5{e$Ewd&hG~cxki*YmX>7X7cs0{cg6!K#8Uzka!D;tF3Kz@$;{7V5av`= z28wfm#GUgCDvL7HGfEiN@Sm{)it>R)i&7IoN)<{nb5j{izw>hfWjH}H!TD(=<%vb9 z46z0OLCU$ohG!Nh=OhA^7BOr;u%#a;%mES(Pb|vI%u8oDApNWzD8>%aUs{x$%JB7n z^J|zg=ltB<)VvagZ)c`~e82`$7Lr+#lghB--6eGf2F4SfE{-7{oo~Z7u3O|FVw?Zj zDpU8()N2Y`7k=hH^M_%^57xQ{UipMvp8pO$Z#X(-rMxf18E;9h-FD-^E2FMA>(0Kj z=A1dZy4~`Qak^T~gd@8@zJ1FRuj2c$Qh5JaMt|#*pa1Mt*?pJq@kfcsX@3n*9zScT z*{pNgV5ScP!``^}PmeCUtjX5wsQQ29Ozz7jhBADD#|?k|{pZcH`YM-~X6?k3k0B3! z+g&zM_4Lx5slw@L)#Q#{%OROTW`&DPB$e=oPDa~dA;k_LiM8!zn3P9W57GddCxhT7`!wq z=7pbMG+EnoQc$+0>e4As@7?KhUCS3$uDNu>{r8N23iudGcE@gs((Q3ueCd$u+wE4J zi#oRD-mg8o`0$Knnzi@y?|C*JO$t1jyZyFT-rhK8&DNha>tfx#lO))5P9J($P~pkT z(D4`;Xa`NsW(BH;3ops^I$r3dS$ZMvtMA0;KZAw;h)%NlV_mNuukv5>WclP1GiJ1D SJd^;&GJ~h9pUXO@geCw84LCgj literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-Smart-Screen-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-Smart-Screen-events-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..7cb8349b6236829948936c079704d2820f5a91d2 GIT binary patch literal 801 zcmeAS@N?(olHy`uVBq!ia0vp^azL!e!3HGH$w=PF4%&ioyF z#SMM)^7r<5ah9LwRIB#m@!j9?XMg^m{;K|wJom{$nK$37TM{`K zR$PB=;49pGaKQyT{qov5kujOG9#z;JDvh0TI(5b}PS-#NhC-RcrLiGeq9wayA2O#j zU4LzAbKY6Rwd1jc`6d(Jjd$}l-pq-sRrNe&&mnks-ujf=W`@T)iv2t%)nuQW^8WV` zOZ8(CH@D4wIXyaNl8WPHlM|bCrr0qAgo@5u<~V7I&wK@rdl}YKy_U+aTfOR6`oXPH zx|gSMt_xeeBW}Gt@7@@_o!@*4R$q0JXya&FVDP2Hijl#@SDSBIs^r@;>Gs154Q_n4 zDY2ScvwV%6n$n{=!JBWY-2dMCdq%O}u66c*)Wm&UOy-~OG*m0;RPl6bOT19Dv*yKb z0Uwtm63VAH$vH_To6Pl-cd~r`)BL*cwp``DWS(~CC7HkG+Hx@UxG9@R@t#RD-smLI z`9o}CYGjH8Tj9C*>*c#;U+&TqdAYac*rUBN#}8(0by|NN7$z3;&(H8td-45u(!{#J zM1v2OTf2`kbuCJ;krS6v+RyS&wrcj}m$HBO>bmS0pD8Z$ky&>11u!Krc)I$ztaD0e F0suGeKyUy6 literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-access-token-modification-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-access-token-modification-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..4155bbfd03ca80ccadc908c8af4475475de197b3 GIT binary patch literal 738 zcmeAS@N?(olHy`uVBq!ia0vp^3P3E!!3HFKxnwkf6lZ})WHAE+-w_aIoT|+y4HRTA z@$_|Nf5<7!E5Mq=&9WEhX0HeP?QfWT9ldyQmRmrnVZUB`kkK>D8mVo3C>R|DNig) zWr!{K4^qwzHaxR9IVTaQw1{E*fi3+&VGfXRcw$jrW?nkO0qJM$Kryh>g7Zs@l2aMJ z{%?K_Q|6qXo12B8 zz5ex;s-KvSTuXY(vv8UpcXqOqds1f70wcqXqS?;53q^l3wVgZHb%b3YW9hurD)XN2 ze3ZE3(EgZzlKXg!4^Qjp2v}g(Rr6E&0q+NW2D{BO!dHu4du__s&dlHtC{nUJ_Dj{? z<&0kaZyGK74CVS68Rq)2?^?&qVDbD$ju}J4%MvcnNpZ{uv(FY-%{7?mlV`U*S9+=! z>*9+V#ta?{6gWICn{+MeusN@MOrmn$_p`#Tf|;}290fWq{hhFZv-W=bs#WEuwLOJG zLR;Vep2@9{b4bNg;j|Hh!}YIUe#d)HOI7ilB*ShTapfTy+dkb%qEu+#Dju4X0f zzN^%ioVe+4-F$n8y>afl?;fkM+yC0yza#hdPbP)~2?hr~R*L4w#(1QqJ}xH@_zM*}=V&9$Ord06NmLZ}Pn8X|B^!IUoP$ zDc~&PbZ{||;mh0^bFcUG*Zdc|^k$t+yCvMUh@;#&k6~G6()Qa6@4rv)sy;oF&M`+;I?AY~z$B{``KE8bmFXJBA7@^o0?&Pgyo|C29Z)m!Jq zv9aoXa0gJZtl99JT!+8K#!7?V`|95v+1s_q;r2EI9_B=eLxppq7wep!pwek}#DM3u z;*u#VURM=P*fgiOFLRc{QWixQ?ngyC*R;Rb#kVX|FY9|GXA?tcXk*YSR>q8!L#44j zk9Vx#RLsi@@Cux^)Qn+6lGPLr#Sb?8g))atd|MKKWM}2vcDroyp|;-CVczqqgG;8^ zZL#iB^3W`eI<#rc_x>0ASw0KvKg+y#P`&uGxUhx7zETGbSphHhmP?`^DpR=*uqoGGN|f%F0IUHd|&3$P0MHQku_$0}L2>eGL*5+x;#Gi$dnTu_NK;auve zQU032Sb6D|o#uVY(^5A^cTAL6d_=;0KL25b%O;WWn#+$poWsm;=5x+0>%GEK?XE}e zblL`a<=4LaEvMLW-%~)aVofQb#A|{YjSz4>;-xbOcu?yVb!h>;G?5GzEH!!PC{x JWt~$(69DyQx0L_@ literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-file-observed-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-file-observed-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..42da4ee738c48432587e7a0b89b7bed0d2882898 GIT binary patch literal 486 zcmeAS@N?(olHy`uVBq!ia0vp^ia;#O!3HE%Vpw+qDb50q$YKTtz9S&aI8~cZ8YswK z;_2(k{*Y6M&rGJ!zy19WEhX0HeP?QfWT9ldyQmRmrnVZUB`kkK>D8mVo3C>R|DNig) zWr!{K4^qwzHaxR9IVTaQw1{E*fi3+&VGfXRcw$jrW?nkO0qJM$KrwcR{?el4REDqr zn_t6}Ip^o*rskC}d^+U7ZhaCo^n+0U1^8)mnFXig*_ixsWDWpUF?Vj)VjF&E{ouuOU=}wW(X(omfmi$lW-V+Y$ z6BI1<&v>!7{!4E$pJK~@&m$6o$#>4LHO;xb?9|?)9kW^zK<26`^5mX*zx7XdX>4fW ifFDZ*Bk+2_Yi@000VfMObu0Z*X~XX=iA30IUzpIsgCw4s=CWbVG7w zVRUJ4ZXk4NZDjy8_YVmG000SeMObuGZ)S9NVRB^vU2y+80000BbVXQnL}_zlY+-3_ zWpV(wz_gD5000PdMObuKVRCM1Zf5|%8|H@q000McMObuGZ*_8GWdQa6gX;hQ00?wN zSad^gZEa<4bO83umcIZ100wkLSaeirbZlh+sP57y000IlNklvI&x6~%wI zyJuf$B^hDB1`8a?w#qyW3)Y75AP(@}D(CdVk)c+TqI>GLM-M9i5Pc|N47DntxWq9zs{f)ht*1kAv65{G7z=4u~V z@HAW5_XDSz{EukO^C5X&u(9!&q5$Fmt4~wJVL-dx0SxB?SOTD>QAr({s$9JAE+8~p zCyS=(s~m?8NGXbv_4RcgJi1FURElB;5L|Fz4ilK2c?&Zmcu#N%XqoF6Tr?%m2P`iw z(`UNkxKg@LU0c7m?+(u)1ZP6g0nUNRav5v zK&UEDpFCmzpwB1QKA}6?{Eq;S<=0{CY(C_RwROJ!(=DnZ;=MQ2oA_xN(iN*AC0#2tlqf6_0>T)#~vLKxx|j=la4%h#^b znV-j0)3DJU=}Um%zA)z#=-6;m?5r%WF1sOU7(>fXuNQ?6L1=n=a^>2 zgHR&)l!an6yQesN`2vgYTwwXy$EeoF`6Bax6EH2Yn80g)i+)Vp6ey8EB|@GEe5QboDBgR%GGTmA)*EpRHaee%@na|2a)OLjkdg ziiwpGN9?zc-amnAhc2d|N)QM~0wF;jXmNZLAF>!DNL>$AFohVwsp2pkV71R_Hr{%( zomxuTl-A1|fFo8B#89ocb@w)yacSj4^1%?(i58JMK?LyP5tOyxf6k+48-%K$@+|<` z29+2MjAnqS)Ah_4oJgup;$hU)Q}s$^A!6)oZBaZOAP5gPH&S7Zb*oD>AVdUc_|!Ev zpFXDd?R^?^Z_#QwS{MmdiI|c#!KteQ=ooNEEtP}Zaw-!R&MwpiH?sBJ6N;iwu{p%~ z0LWMikK_@isSw8kl|a^=tOuq7`P;odo2V_Bve&JLt4KWM0|c ziQN9%H}v~M_WOeO0p~p-1pJ{9yvGNhBvS}@@A2M^ue-fHb_YZ5+`WexoLlHJbE@+S z5XT;?F}JY5^3~7S`r}Q?qT=T7ehU(zAs8ij+A|O+F~kCdq(;R1v8Qp}k7fFu1?F62 z_1YEY=DQQ6KLz2GDFrIp^KWx?(|f~tk8_Ew zgwmmsgn&9nX~sJjFLUEJzvjxyN3>m-fSZ!8$1vvsr8Re+kFQ)HxE42kM(^q084d)E zWy&rQ)CGJjY0b?80p}f69Zh9bV0GpPH7+fl=f-EhVrA(kv|QrUv~K0`Wi(Ut+-Mus zc=e!P^5DU@Y;WABD1|}3lN^T(7a9o0scyGU5>F9FFF0}HRpH$Ex4FFd9y6zAjy%mp zt+V6kK^`ME$7K~rigwU1*y%mT%qU`2za$DchaqH*$y=3~8v`159y4Z7&(w)FiOE;l zG2mXd7;D96GJbgNVf<&UobcnKC1Z421I)ay<^3B3_a@BD5HoNmdzb&ef_q*2QU43< Y-yOsd0)Zezg#Z8m07*qoM6N<$f@novQvd(} literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-module-load-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-module-load-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..6e071edb03023f20bba22acaea08ea0af917c417 GIT binary patch literal 757 zcmeAS@N?(olHy`uVBq!ia0vp^%0Mj7!3HFA6HEGm6lZ})WHAE+-w_aIoT|+y4HRTA z@$_|Nf5<7sr*0uPb%!um$TgzGv9u&3zldSwx-%X?A)XSTkV|TDa#3bMNoIZ?gD|He z$b2r4xO09%Wl?5&MhU|j{xeoUQ9iI}QEDPcsX|F+ZYqQ6cYaQw3@1n?I6tkVJh3R1 zA-3Q@NI5sy@XX@moJ63~B8Ke;wt$?=0TK>REXvEwOJ_JB{j41*#tzY6T9lm1@b!Q5 zYnU?U{M_8syb^|QXQu53im`!|g=CiGq%y2{cS)Urf$@N+i(^Pc>)UAy`p;lam6LWaSu&w$ z=k6B$gKsu$j!#qH{oBo@#s1LmeD0d1(^oDAqsRYGaVS36rN?lfG?qirYO3UxpF4HD z3(g(1WM}YEo9vhB!0R!oCFi!<=}j6u&PqyLhbQQqR=T}S({qwq=DbTQj8?63x@@A+ z#dO$!fuSw&L50mC9q$#ZZh0n3eLa(5Ql)usWsd+;<}9VIMXNGf1v(aSWX^KpVANEV zIll6lMIWpozP?3bNBe{juIv1rAJ%|RgQu&X%Q~lo FCIC&xFp~fP literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-network-communications-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-network-communications-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..7af075b0d7e19c0d4f683fc61e326fdc8b767a61 GIT binary patch literal 686 zcmeAS@N?(olHy`uVBq!ia0vp^sz9v7!3HF6%of-Uq&N#aB8wRq_>O=u<5X=vX`mo` ziKnkC`$JA4K1u6ik)N)Bg0W#*+b9FTt24isaD=r1iwPG$J| zzxg#xnR9+_Zfaf$!?!cj_5;P(K*~ZgOL9^fR=m5U&cMJ}>FMGa64Cm0`o_K{2NBo) z+kLv7wh7ruIS-kyL|JL=Yi*f!{sZ%ym!(45O^xymVXtl;a(J4S-m@#uXu0yvlh$`^ z;tsiJF8yJ!?_bmdxiBwr?WNsQFCF!I`DwzGDMFf0FK<>pHDO!s)wIolp`nsbZ*RLg zFY!*uyyr&>&(zp0f4xgSdP2~pQrW)80>=$2=j~s%^5I(cNh*P^fp^Y|xh|ZfB01mp zmQmI!9q%RuiP-{90&R*6k<&Ittv#`cr@??n(5c6l&CwxpT2yh*l3B|fIT#&cuUE`t zKk%@C;X#EB(}w%+89&(cfBwnSAkefdbDsWJy`Cj8*O$JpesIkx_Bz9w>)8z3ZtF7a zzRR~`>&^%rh8Mr(u9tpgo2j!a$jdeG%Y{YmfnR31vVW+pzcbUscc$O+^5V@mdrW*A zZ};oF&M`+;I?AY~z$B{``KE8bmF2a3G*ba4!cXni|$hkDI+; z_@zx8s>&M}ax*5b?s0T{%4o!z#B@sMkU&i7rOw}mKa}2a?bqs>^W@|<9o6XTqSEus z{1kTU>)BWQQC3q)bP|FRg?FV-oZ(PhAzyT^vEve_?9LKyYrlJM zv?TA9gz~i1i*ohdQ5o~nx8!z9Bzwv46%btb+N$C`|5TSp0sOfuUrSZaJ6z4ru)j^7B$4q=B+89$K)h7P*TCqyY#J72oMx0+^?zJmU{gH}`?oWBs<2m=H kd*Fc<6(5g7AmS0*Vgc``;!nOm0(zUl)78&qol`;+04eCe3;+NC literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-process-event-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-process-event-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..c48ea6e880e4361051508d1c45c7f66edaf9ed85 GIT binary patch literal 895 zcmeAS@N?(olHy`uVBq!ia0vp^DnKmH!3HGz_vU{CQk(@Ik;M!Qd`Cc-ajG_-G*FPe z#M9T6{UN6ipPc+w>4rmKA=ii!$I_CF{33>x>&|!pg?LJULN2Mr$wiq3C7Jno48oj> z%0O{0khpVxL1j^9dPWJu8vZj@Kv6!hXi;h+NU1_eW^O8j>34okpbRHSCOAK>q&%@G zl_9p^KS((@*znBalAKhA74I&oGcYiDdAc};M6|x0wsE~;pvbZP z+w-}5gPaykTyT*?>f(i2SspIVE!InaaCf*U-+F1P6&%p(5n>`GbW+5rWzvkMltp&Y zIX9l)e6vS7zx?UZ^?QCk+Z}(-_W8X^MWsW`AK%uqSDZJVAbH*)&4zjA$FEG9T}+;n z45WG)7#3gTn55zuIHg`*L#o&5vPs9H4!6aO3>hX;0c!}Z2d%u)>lY}J zVZQuX)*PZWHN$G|y$lw|1%K=Ecd>^DpMPG=;IRJs?lmuW^?5CA za#3nLnbMSF*6p>FDfYVltj|a0?*G4qYwqeJ5{uI|d%C#1Et~!7>#wP9(^9jx-*$1i zl4I6s=+=Gok@LSh$@La8KBmhrcV7P{ZgW+VuU&Y75@;`t5Ct*K3UBOsR?*jjG%>!O_mF;JM>5ReC)z4*}Q$iB}Hu!a~ literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-process-injection.png b/windows/threat-protection/windows-defender-atp/images/atp-process-injection.png new file mode 100644 index 0000000000000000000000000000000000000000..f4788b58336fd9194ed896e2535aadeea315650f GIT binary patch literal 897 zcmeAS@N?(olHy`uVBq!ia0vp^ia@Nu!3HGf><~N!q&N#aB8wRq_>O=u<5X=vX`mo` ziKnkC`$JA4er7SFOgmq&kZVMVV`)i7ei6gUb!R+)LOdlvA(zzR0+wU!%D06K7 zox4d}XJ74Zmi1BWY^|twxa>H~qO*}_5>KxC;|FOzix#~5dOYF!gr3f279Q&-=rUS+ zCM(XK_k88#J0%@W&t8gfHO<(~!g@0Ozg^9}=YJ2rR`RqlK2*%j5Zn2`M0FMj#XS1< zO)UEU_67ffqUTMt(pB^n%Bs&gk+xZYg>j+(!sU~9?AzzIFyg?3YK~qv=4q*knVFn9 z0uKv*yj0oN?fPQ*@`BTOPl_u=x>%POXHGZ*1kIaet%bwG!+{2vo0|)`Fs}do>%#9< z;?q(UH_vd~8B4e-<^e2mt4|(^Z(xQ zoFuVjnNA`{k2lXTTkzT{`J+VpeZJz<)Ye(c3iI;%?B@4d-?mmcxqJ8SX`5n}{PjP3 z@uJ`)ZcmA}#s}>R$BrE<`0-ufmA~le)2BOJl)f>&H7ls8IrH*mCL0r@pReyl10FT; zNiwzer-D|dnD?ndqeo1i zPgc&6Opo}zjV*H8#mkqO*I$3Vhtb+MW7e?@lT!g2N1B_Pw}scupSEtrs#OI$V**52 xnVFg2uKy#~cdyg$v(f%?zZYI6FTG5Dvd@=F(05UP-vmr)44$rjF6*2UngEvSdYb?M literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-registry-event-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-registry-event-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..12f8d99c9b4502c7d757f894b451351c6683d409 GIT binary patch literal 553 zcmeAS@N?(olHy`uVBq!ia0vp^DnP8r!3HEZp5@dAQk(@Ik;M!Qd`Cc-ajG_-G*FPe z#M9T6{UN6ipRr_3P`w0L$TgzGv9u&3zldSwx-%X?A)XSTkV|TDa#3bMNoIZ?gD|I} zGEkfgB<`GFP+63jo>9WEhX0HeP?QfWT9ldyQmRmrnVZUB`kkK>D8mVo3C>R|DNig) zWr!{K4^qwzHaxR9IVTaQw1{E*fi3+&VGfXRcw$jrW?nkO0qJM$KrwcR{?el4REDqr zn_t6}Ip^o*rskC}d^0JRmN+OFnj{fKpFm9e%ZaX{ngy>D>(4~J?ZoOu3tm1kH$7dU6h9y(97yhmhz7|!! z$5k_RYS6uk+uOo8K5kNL`EblR#d_1Ob$jETygD;y8T36~W^=P;TI$DZJjRPNrM}eG zuL-zb%Fh_i=COL=n%HMzpVu|H9n<4>bdhLF{QNIF=-UDAE!P+XdX|5X4?nIhvQXlr xYi97mAy#xB6!PC{xWt~$(698o?&Ex<8 literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-respond-action-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-respond-action-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..0ceed7cfc664fc29230c8a7de73e1635e4ead6d5 GIT binary patch literal 936 zcmeAS@N?(olHy`uVBq!ia0vp^>Oic_!3HG7jf9nf6lZ})WHAE+-w_aIoT|+y4HRTA z@$_|Nf5<7s&!}@OxV086iU&OF--5C#{5KjqE$R)KnxhS)sBr`vcL6}n! zWF!|z+&RCXvM4h>ql94%{~0TwC?8m~C^ZqJRG}m@H-L1 z5L@scq?{XUcxG{OP9jig5ySQaTl#^*93bKF#G<^+ymW>G($Cs~V(bw8rA5i93}62@ zzlJGu&d<$F%`0K}c4pdspcorSSx9C{PAbEScb9+x!Bp(&;usRq`gX>CZ|Ojp1NQHO zo(j2KOk%!vFxzT}NvVlpwpn-g>{yxCDtuG9rgFsvEt*t+AlBu|(Wd%_#jO7sR&p%6 z;V2`M6!-4#cIS(WR!)-Ve>H*s&ZoV<>)sc?e^-0|@sth@f96vA2Y>jxt1?fUdPlE| zyj67e(zNVp>bl?8+~d}s%60ts@s1YVy9PY16*hi0a@*C*tEx_2`K`I-nnr24qzFss zZj);YN*QZs{xmpz=gu5kONQ2@e~)cu`mnA2I=5I>R+h!_fb(yTr6N(;Y3b>LuWo0X zsHl5+?D3o6q4MrXe_x-4wYBo>vv%|JoyyC0Zojce4 z@?is&oCmYF8bw=MTWd}~4HUk6H&$A;kuCnUa|g%843X=lnrlQ1ju}{5-YkmMR#sPX zxvRlFU(BO-*@t4g+qZA)Uf+7HrPr{ev~=U1J!c}SdSdL3KYNzuZ7Mx2_}u>AGZiF~ zJB}v(*ypb{IWe`gb?w@<`*(U>{o=8@XxFFZ`!m;OSKZ~cwYAl$jZ8{OY58;AMp{~W zyXEz#uXjnAnHVVM?W$fFkWgDYH^8aKuwvfv-5(2;{8+A+TK=g!aqE>7!}I;;cJA7x zH2u6_r^}1CZzopr0Q}U6#sB~S literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-signer-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-signer-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..44f431e3f7175e029218e1b314c2ee16455f5a83 GIT binary patch literal 633 zcmeAS@N?(olHy`uVBq!ia0vp^azHH0!3HGvF1f=4q&N#aB8wRq_>O=u<5X=vX`mo` ziKnkC`$JA)9!;jdO8-^BLaq@dj-@3T`9%yX*PZbI3h|Txg;oF&M`+;I?AY~z$B{``KE8bmFXJBA-@pN$v@#uVeZGB&}feibH z_j>9Zs~b60xZD%OYM7^<5t2(h{9wZehO0JgEbUI$9$i>aoppL*%!{%MZzernt+1uW zqyFz_v`Sbs`N#Fg>bjU?&wpC>GPnZ0R(%K74n&woDp{Q0NOy6dao zgl^6;y3!)RaNuoO^{(@2ru+E6Zr-uw*!dPiv)Sy+FLO>m?W!wt-0+b_-5qh)#>`nu z{w^sHV6l+vf4%QryGQn&@3tCC4Sa>C1cihym3uZv*;B|Ruw`4WpsU~}9p>jTx_3-? zb8fdiwqRg5UYKy(Y}T?s?$u|Maw5fE?W()7b(PkYQr^>>!VY(Dj=EmDV_mn3r$L{x zi7&Gv%dT~+Ti+|T95CQ1iQO($!})KYc5C7e&YB5--%L&AWcX0~ztEQF@S{M{XE z)7O>#A*V2pfYt3Kr+^|rA=ii!$I_CF{33>x>&|!pg?Kw>34) z&))AhzwDRq?K4k{9%}73yL9IG;sxe^sy?LOVf_4a&f7BYjS(yf+iySIr8n2_`M&}I zmNnP2r=3<^ewkCDW$U$!wI6Hehpl#9d~rjQ@v_oAQENZc&VT$-BI&v$4;zDySa-eY z@xl{Ni;m6AFq{3%+HU^&jJ0dm{mbWTXZ~QUT_3D9b>8Keb+7H%*Ij@8^3ctkYZ2a} z=bnE)Hf!VR%Y7SHH!C=3rpiccox{)~kYgtOxZ-h$x8};Q)yEpQ2d%!U^m^j?9oJv0 zI<*Rv?7sV?U}wy-yLrdke*d*=byBqCF_7yolsPUH>SZXymoJyTb&k#X&4;E2`795f z9enFxkeAK*?woBFD@_0No=-D&TP*0*QLta2>12u!cWaCOguiw2b&Xn6xq?nbWF-BN itK2((ulb)1HH@lPOC=|6VEYJ+4hBzGKbLh*2~7a#%@j8P literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-windows-defender-not-detected-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-windows-defender-not-detected-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..bc8c7f03200ce5d8864448b6acdcdbc3c66403d1 GIT binary patch literal 772 zcmeAS@N?(olHy`uVBq!ia0vp^ia@Ny!3HER7Hl{Oq&N#aB8wRq_>O=u<5X=vX`mo` ziKnkC`$JA)9({>0sf9PdLaq@dj-@3T`9%yX*PZbI3h|Txg;oF&M`+;I?AY~z$B{``KE8bmFXJBAF@9E+g64Cnhn(ewx4ic;n ziud2S7W9~@K`Lt2%AB69mnFp?@TF)aIoazSxZ$X47G_eSa;1$`LNoTj&ZFWz`*(Vr zxq4`_fRTP;g^~RManC(g|KoTW?y-EVy;yhh&Yq(lH3Fgcm2fmj}6r(pDY$&$SS?|WuF`OW}VYfTX$u) za2yu!TA3WJ*=oS^Uo4P!W6-OP%934vpI?i;EwS>r{AJa<-*#-xj0_1|qhe$AyO`F! zzUK7DN@!cI^7+rJcLj0vJw8x4XYW~KctXFYlOaoQx6g#t~#|ISnCe|~vRoUoID=cMYpu}j68RJLB55_FGcj?)0xWSEMQqSWVP8?Zl zS8iP<&{Qa6&NLzA?fMs~r#2nQF=J-%SsuLQ_S;?C