From 75c78402a74e6f5db9bc0bc2b572c8538bcdf043 Mon Sep 17 00:00:00 2001
From: MS-binche <57928324+MS-binche@users.noreply.github.com>
Date: Wed, 27 Nov 2019 02:49:38 +0000
Subject: [PATCH] add information about smartscren log enable method

Windows event log for SmartScreen is disabled by default, users can use Event Viewer UI to enable the log or use the command line to enable it:

```
wevtutil sl Microsoft-Windows-SmartScreen/Debug /e:true
```
---
 .../windows-defender-smartscreen-overview.md             | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md b/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md
index e5d0cfcce1..d22f241c9b 100644
--- a/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md
+++ b/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md
@@ -10,7 +10,7 @@ author: mjcaparas
 ms.author: macapara
 audience: ITPro
 ms.localizationpriority: medium
-ms.date: 07/27/2017
+ms.date: 11/27/2019
 ms.reviewer: 
 manager: dansimp
 ---
@@ -62,9 +62,16 @@ When Windows Defender SmartScreen warns or blocks an employee from a website, it
 ## Viewing Windows event logs for Windows Defender SmartScreen
 Windows Defender SmartScreen events appear in the Microsoft-Windows-SmartScreen/Debug log in Event Viewer.
 
+Windows event log for SmartScreen is disabled by default, users can use Event Viewer UI to enable the log or use the command line to enable it:
+
+```
+wevtutil sl Microsoft-Windows-SmartScreen/Debug /e:true
+```
+
 > [!NOTE]
 > For information on how to use the Event Viewer, see [Windows Event Viewer](https://docs.microsoft.com/host-integration-server/core/windows-event-viewer1).
 
+
 EventID | Description
 -|-
 1000 | Application Windows Defender SmartScreen Event