mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-20 12:53:38 +00:00
Update shadow-protection.md
This commit is contained in:
@ -22,6 +22,8 @@ ms.collection:
|
||||
|
||||
- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559)
|
||||
|
||||
## Shadow protection
|
||||
|
||||
Shadow protection extends behavioral-based blocking and containment capabilities by blocking malicious artifacts or behaviors even if Windows Defender Antivirus is not your active antivirus protection. If your organization has decided to use an antivirus solution other than Windows Defender Antivirus, you are still protected through shadow protection.
|
||||
|
||||
> [!TIP]
|
||||
@ -29,7 +31,6 @@ Shadow protection extends behavioral-based blocking and containment capabilities
|
||||
|
||||
## Requirements for shadow protection
|
||||
|
||||
|
||||
|Requirement |Details |
|
||||
|---------|---------|
|
||||
|Operating system |One of the following: <br/>- Windows 10 (all releases) <br/>- Windows Server 2016 or later |
|
||||
@ -52,7 +53,7 @@ Shadow protection extends behavioral-based blocking and containment capabilities
|
||||
> [!NOTE]
|
||||
> Currently, shadow protection can be turned on only in the Microsoft Defender Security Center. You cannot use registry keys, Intune, or group policies to turn shadow protection on or off at this time.
|
||||
|
||||
## What happens when something is detected
|
||||
## What happens when something is detected?
|
||||
|
||||
When shadow protection is turned on, and something is detected, you'll see it in the [Microsoft Defender Security Center](https://securitycenter.windows.com). If the item detected is malicious, you'll see its detection status as Blocked or Remediated.
|
||||
|
||||
@ -60,7 +61,7 @@ When shadow protection is turned on, and something is detected, you'll see it in
|
||||
|
||||
### Will shadow protection have any impact on a user's antivirus protection?
|
||||
|
||||
No. Shadow protection does not affect antivirus protection on a user's machine. Detection usually happens if the primary antivirus protection misses something, or if there is post-breach detection. Shadow protection works just like Windows Defender Antivirus in passive mode with the additional steps of blocking and remediation for malicious items detected.
|
||||
No. Shadow protection does not affect third-party antivirus protection running on a users' machines. Shadow protection kicks in if the primary antivirus solution misses something, or if there is post-breach detection. Shadow protection works just like Windows Defender Antivirus in passive mode with the additional steps of blocking and remediating malicious items detected.
|
||||
|
||||
### Why do I need to keep Windows Defender Antivirus up to date?
|
||||
|
||||
|
Reference in New Issue
Block a user