deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-30 09:43:42 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Merge pull request #6481 from MaratMussabekov/patch-137

Browse Source 
added a tip about Windows Event Forwarding
This commit is contained in:
Beth Levin
2020-04-13 11:05:28 -07:00
committed by GitHub
parent 0c5035439d 51a9cbad3e
commit 9d85dc1c08
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
windows/security/threat-protection/microsoft-defender-atp/evaluate-controlled-folder-access.md
View File

@ -58,6 +58,9 @@ Event ID | Description
1124 | Audited controlled folder access event 1124 | Audited controlled folder access event
1123 | Blocked controlled folder access event 1123 | Blocked controlled folder access event
> [!TIP]
> You can configure a [Windows Event Forwarding subscription](https://docs.microsoft.com/windows/win32/wec/setting-up-a-source-initiated-subscription) to collect the logs centrally.
## Customize protected folders and apps ## Customize protected folders and apps
During your evaluation, you may wish to add to the list of protected folders, or allow certain apps to modify files. During your evaluation, you may wish to add to the list of protected folders, or allow certain apps to modify files.