From a04d5529d1a5f39dc9fae65960b7b3e110738f03 Mon Sep 17 00:00:00 2001
From: Michael Nady <michael.nady@gmail.com>
Date: Fri, 18 Mar 2022 01:49:55 +0200
Subject: [PATCH 1/2] Update defender-csp.md

I searched for confirmations of the feedback online and found this link stating that a status exists with the name 'Blocked', so the commenter seems right in the link he sent as source of the enum
https://support.huntress.io/hc/en-us/articles/4414493304595-Managed-AV-What-is-an-Incident-Report-
---
 windows/client-management/mdm/defender-csp.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md
index 5cfdf4faa9..df56527a9b 100644
--- a/windows/client-management/mdm/defender-csp.md
+++ b/windows/client-management/mdm/defender-csp.md
@@ -229,6 +229,14 @@ Information about the execution status of the threat.
 
 The data type is integer.
 
+The following list shows the supported values:
+
+- 0 = Unknown
+- 1 = Blocked
+- 2 = Allowed
+- 3 = Executing
+- 4 = Not executing
+
 Supported operation is Get.
 
 <a href="" id="detections-threatid-initialdetectiontime"></a>**Detections/*ThreatId*/InitialDetectionTime**  

From 82010532d5fd8535154e0b0db63a7ab64bd4c1f6 Mon Sep 17 00:00:00 2001
From: Denise Vangel-MSFT <deniseb@microsoft.com>
Date: Fri, 18 Mar 2022 15:18:35 -0700
Subject: [PATCH 2/2] Update defender-csp.md

---
 windows/client-management/mdm/defender-csp.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/windows/client-management/mdm/defender-csp.md b/windows/client-management/mdm/defender-csp.md
index df56527a9b..f514676cbe 100644
--- a/windows/client-management/mdm/defender-csp.md
+++ b/windows/client-management/mdm/defender-csp.md
@@ -234,8 +234,8 @@ The following list shows the supported values:
 - 0 = Unknown
 - 1 = Blocked
 - 2 = Allowed
-- 3 = Executing
-- 4 = Not executing
+- 3 = Running
+- 4 = Not running
 
 Supported operation is Get.