From b916d2971c402ce04925b43ce8483d55b47baee0 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 7 Sep 2018 14:29:02 -0700 Subject: [PATCH 1/3] fix related topic link --- ...anced-hunting-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/advanced-hunting-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/advanced-hunting-windows-defender-advanced-threat-protection.md index 2b53bf10ef..7b40ec9d0d 100644 --- a/windows/security/threat-protection/windows-defender-atp/advanced-hunting-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/advanced-hunting-windows-defender-advanced-threat-protection.md @@ -144,7 +144,7 @@ Check out the [Advanced Hunting repository](https://github.com/Microsoft/Windows ## Related topic - [Advanced hunting reference](advanced-hunting-reference-windows-defender-advanced-threat-protection.md) -- [Advanced hunting query language best practices](/advanced-hunting-best-practices-windows-defender-advanced-threat-protection.md) +- [Advanced hunting query language best practices](advanced-hunting-best-practices-windows-defender-advanced-threat-protection.md) From 391aa4df1e5b1f8975f9779374f9b01068a90726 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 7 Sep 2018 14:33:55 -0700 Subject: [PATCH 2/3] add create folder step in run detection test --- ...ion-test-windows-defender-advanced-threat-protection.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/run-detection-test-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/run-detection-test-windows-defender-advanced-threat-protection.md index 44f78723aa..ad774f962c 100644 --- a/windows/security/threat-protection/windows-defender-atp/run-detection-test-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/run-detection-test-windows-defender-advanced-threat-protection.md @@ -10,7 +10,7 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: medium -ms.date: 11/06/2017 +ms.date: 09/07/2018 --- # Run a detection test on a newly onboarded Windows Defender ATP machine @@ -26,7 +26,8 @@ ms.date: 11/06/2017 Run the following PowerShell script on a newly onboarded machine to verify that it is properly reporting to the Windows Defender ATP service. -1. Open an elevated command-line prompt on the machine and run the script: +1. Create a folder: 'C:\test-WDATP-test'. +2. Open an elevated command-line prompt on the machine and run the script: a. Go to **Start** and type **cmd**. @@ -34,7 +35,7 @@ Run the following PowerShell script on a newly onboarded machine to verify that ![Window Start menu pointing to Run as administrator](images/run-as-admin.png) -2. At the prompt, copy and run the following command: +3. At the prompt, copy and run the following command: ``` powershell.exe -NoExit -ExecutionPolicy Bypass -WindowStyle Hidden (New-Object System.Net.WebClient).DownloadFile('http://127.0.0.1/1.exe', 'C:\test-WDATP-test\invoice.exe');Start-Process 'C:\test-WDATP-test\invoice.exe' From 6bd49d8065d6753572911d0aaa935ccb3c2ecb27 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Fri, 7 Sep 2018 15:02:18 -0700 Subject: [PATCH 3/3] address github issues --- ...age-privacy-windows-defender-advanced-threat-protection.md | 3 +-- ...-onboarding-windows-defender-advanced-threat-protection.md | 4 ++-- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/data-storage-privacy-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/data-storage-privacy-windows-defender-advanced-threat-protection.md index b4de052320..1efa791236 100644 --- a/windows/security/threat-protection/windows-defender-atp/data-storage-privacy-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/data-storage-privacy-windows-defender-advanced-threat-protection.md @@ -10,13 +10,12 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: medium -ms.date: 07/05/2018 +ms.date: 09/07/2018 --- # Windows Defender ATP data storage and privacy **Applies to:** - - Windows Defender Advanced Threat Protection (Windows Defender ATP) diff --git a/windows/security/threat-protection/windows-defender-atp/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md index e15d044a19..e7c34f1bb9 100644 --- a/windows/security/threat-protection/windows-defender-atp/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/troubleshoot-onboarding-windows-defender-advanced-threat-protection.md @@ -10,7 +10,7 @@ ms.pagetype: security ms.author: macapara author: mjcaparas ms.localizationpriority: medium -ms.date: 04/24/2018 +ms.date: 09/07/2018 --- # Troubleshoot Windows Defender Advanced Threat Protection onboarding issues @@ -75,7 +75,7 @@ Event ID | Error Type | Resolution steps ## Troubleshoot onboarding issues using Microsoft Intune You can use Microsoft Intune to check error codes and attempt to troubleshoot the cause of the issue. -If you have configured policies in Intune and they are not propagated on machines, you might need to configure automatic MDM enrollment. For more information, see the [Configure automatic MDM enrollment](https://go.microsoft.com/fwlink/?linkid=829597) section. +If you have configured policies in Intune and they are not propagated on machines, you might need to configure automatic MDM enrollment. Use the following tables to understand the possible causes of issues while onboarding: