deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-21 13:23:36 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Add more info on archive bombs

Browse Source
This commit is contained in:
Tudor Dobrila
2019-06-24 10:46:00 -07:00
parent eaf7b97185
commit 896cc1f51c
1 changed files with 16 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac-preferences.md
View File

@ -142,7 +142,7 @@ Type of the threat for which the behavior is configured.
| **Domain** | com.microsoft.wdav | | **Domain** | com.microsoft.wdav |
| **Key** | key | | **Key** | key |
| **Data type** | String | | **Data type** | String |
| **Possible values** | potentially_unwanted_application | | **Possible values** | potentially_unwanted_application <br/> archive_bomb |
##### Action to take ##### Action to take
@ -209,7 +209,9 @@ To get started, we recommend the following configuration profile for your enterp
The following configuration profile will: The following configuration profile will:
- Enable real time protection (RTP) - Enable real time protection (RTP)
- Enable the blocking of potentially unwanted applications (PUA), which by default are in *audit* (non-blocking) mode - Specify how the following threat types are handled:
- **Potentially unwanted applications (PUA)** are blocked
- **Archive bombs** (file with a very high compression rate) are audited to the product logs
- Enable cloud delivered protection - Enable cloud delivered protection
- Enable automatic sample submission - Enable automatic sample submission
@ -230,6 +232,12 @@ The following configuration profile will:
<key>value</key> <key>value</key>
<string>block</string> <string>block</string>
</dict> </dict>
<dict>
<key>key</key>
<string>archive_bomb</string>
<key>value</key>
<string>audit</string>
</dict>
</array> </array>
</dict> </dict>
<key>cloudService</key> <key>cloudService</key>
@ -293,6 +301,12 @@ The following configuration profile contains entries for all of the settings des
<key>value</key> <key>value</key>
<string>block</string> <string>block</string>
</dict> </dict>
<dict>
<key>key</key>
<string>archive_bomb</string>
<key>value</key>
<string>audit</string>
</dict>
</array> </array>
</dict> </dict>
<key>cloudService</key> <key>cloudService</key>