From 5242d9ef1e496e891c5b9b16b8bbe6ea99a1e70d Mon Sep 17 00:00:00 2001 From: Tanya Bittenmaster <30839220+tbit0001@users.noreply.github.com> Date: Tue, 19 Sep 2017 09:17:25 -0400 Subject: [PATCH 01/12] Update menu items --- .../atp-Application-Guard-events-icon.png | Bin 0 -> 782 bytes .../images/atp-Device-Guard-events-icon.png | Bin 0 -> 767 bytes .../images/atp-ETW--event-icon.png | Bin 0 -> 1415 bytes .../images/atp-Exploit-Guard-events-icon.png | Bin 0 -> 733 bytes .../images/atp-File-location-icon.png | Bin 0 -> 557 bytes .../images/atp-Firewall-events-icon.png | Bin 0 -> 702 bytes .../images/atp-Other-events-icon.png | Bin 0 -> 765 bytes .../images/atp-Smart-Screen-events-icon.png | Bin 0 -> 801 bytes .../atp-access-token-modification-icon.png | Bin 0 -> 738 bytes .../images/atp-cprompt-icon.png | Bin 0 -> 615 bytes .../images/atp-file-creation-icon.png | Bin 0 -> 510 bytes .../images/atp-file-observed-icon.png | Bin 0 -> 486 bytes .../images/atp-memory-allocation-icon.png | Bin 0 -> 1886 bytes .../images/atp-module-load-icon.png | Bin 0 -> 757 bytes .../atp-network-communications-icon.png | Bin 0 -> 686 bytes .../atp-powershell-command-run-icon.png | Bin 0 -> 544 bytes .../images/atp-process-event-icon.png | Bin 0 -> 895 bytes .../images/atp-process-injection.png | Bin 0 -> 897 bytes .../images/atp-registry-event-icon.png | Bin 0 -> 553 bytes .../images/atp-respond-action-icon.png | Bin 0 -> 936 bytes .../images/atp-signer-icon.png | Bin 0 -> 633 bytes .../atp-windows-defender-av-events-icon.png | Bin 0 -> 678 bytes ...atp-windows-defender-not-detected-icon.png | Bin 0 -> 772 bytes ...ows-defender-advanced-threat-protection.md | 21 ++++++++++++++++-- 24 files changed, 19 insertions(+), 2 deletions(-) create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-Application-Guard-events-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-Device-Guard-events-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-ETW--event-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-Exploit-Guard-events-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-File-location-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-Firewall-events-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-Other-events-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-Smart-Screen-events-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-access-token-modification-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-cprompt-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-file-creation-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-file-observed-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-memory-allocation-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-module-load-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-network-communications-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-powershell-command-run-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-process-event-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-process-injection.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-registry-event-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-respond-action-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-signer-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-windows-defender-av-events-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-windows-defender-not-detected-icon.png diff --git a/windows/threat-protection/windows-defender-atp/images/atp-Application-Guard-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-Application-Guard-events-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..9cf3188628c1bef9049ec83e142d8bf8260327f2 GIT binary patch literal 782 zcmeAS@N?(olHy`uVBq!ia0vp^GC-`z!3HExy*&LKNO2Z;L>4nJ@ErkR#;MwT(m+A> z5>H=O_J^FpJi=`EpFMQ}3%N#=IF^=VoRC+8#rl@>8I3WG39Vo^Q(O+7WoXYU^ zfAedYGUxo<+|;}hhHq!4?FWjnfs}=0mgJ-|tax`xoq>Vzrl*Tzh)3t!Fx&1|4kEU{ zE1qs?>TT^!5an3ua!KGT6Cv(%ip^C;}=V9({JaP?YuFyi;dyfW5YuRKG$z9dReynM&5SIxTl_* zWArWyryrC!oV9h*yHK%^P|-P`=V&DJ%qhN-Woj8{mU)l){O1f4DM7)DHFo~X{RFk1 lZ_xVJtA4EiLH`5gJxn)U@3Hp@Gl5bUgQu&X%Q~loCIC&mK3@O; literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-Device-Guard-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-Device-Guard-events-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..d59adf267426c89f368607935a590146424604a4 GIT binary patch literal 767 zcmeAS@N?(olHy`uVBq!ia0vp^azL!e!3HGH$w=Px>&|!pg?LJULN2Mr$wiq3C7Jno48oj> z%0O{0khpVxL1j^9dPWJu8vZj@Kv6!hXi;h+NU1_eW^O8j>34okpbRHSCOAK>q&%@G zl_9p^KS((@*znBalAKhA74I&oGcYio@^o;YCUu3cT!93WyYuD(1kv_v?@`@5Lz+j+D7 zc6_g@65o6MVD*C2_MH1wcop^M6x%4(%Pq1K`X?RuTfh2$P4wTIf-4WLj+^-Us7;a?*NgfzY8SV zZoL0~2uMx*x_X1oX^H;hhYA*76lmTrb-i?BgwBIXIis08UQ2~I6zBW>Qmfd0Takk) zXM6OTFzpqqxLgA_+{`hU>ldgYGQn%9gQly|%suipQoRp;+l7R>uD@Pg{!8|FWA1GO z9_FV-Kld3hJo)^Se>yXR!Lb7pzrV=eFG&sZYCV3BMO}!qVqW>i^Dj%9R6M`8Zoa8= z?X_vl_1>Iv8Fohjg}Hw98N&N^s(3nWjBr^R)VS`o1P_}+%beT&$CY^wJFE?>4zEA$ zeMI|n%#8ETH{@Cu0oC!$^2-^M*mA6n8< UcdgP40LC+er>mdKI;Vst07ce3z5oCK literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-ETW--event-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-ETW--event-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..4f4b6bb9219f048f963c0e8825c746afe3b7da48 GIT binary patch literal 1415 zcmXxkdpOg390%}UryXn=jU~4ZR++nHatlR-I;7>Pxf`Y}W;0WmDU?etg&9UvIzr(P zA*Y5R*H)5S5l2geB|?28l`s z%B%VuL6T;GWJe4Spp$6~GBp&ChiZuD!^D1+N{gbC&yg6w1KBaK$NMy$&LSBNTY?feVRwP1aI?`6>-IY~T z4miv6F)uv!dbl1ZR8}h9ubd*C@Uuu`@DcJUl&hGa;%n&3|~*K$dMCGE_B?FalQ-)z;T1y?J!G>I+a6t`xW_RG21vC4$a~wGS!}qvy554A&+)( zHOSR9wAWHd1@SK*LzHqse-`1qV`<;&1778`+D*8m8Ux>iluWQkE50~6A}`<9y3xn90g4@ zI?PPf4uwGR97rUR->XvRKqI9hD`w}@M=aIDv8v!j3TF5V7pPLD=L2!w$cL8%S=~VZ zi9-2Ry;y)XGfo~-P8x5m^$CiI$nnECGMUZwCb0<>Luq90$iju+`CdFUN>5L3GK^{V z&jKMaG0|*~bw5Yn6OYHM=k{*HV6ps_m6c9XMg7?8`)505mb=^AuOuh4dxbrxbev4G zGjnowArS7~-Z?@cQ5y-nQ_o>o=(kei^d*X|M0_rDEZ!{$p{-HZO%JdpHGRIQX(fpNK)U0F;KPK;RHDS0_e$ovXt zN0YDnHN0`}e&DAl(H)o-7Z-O)_SNgx_5lIY-*46FyfU8MtjV>#edN~OmhNn{e&zkK zF_BK?L2#}X5>~jerF!VX{5lN-oGh}m3GRPHd81byMa78jTo<7ic?0OYhFP_vbC4&U TVc1FVzX6==UF@oC{o?-xMOB3I literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-Exploit-Guard-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-Exploit-Guard-events-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..7e8dbce304559ec481ad34af0182f1e144cfbba3 GIT binary patch literal 733 zcmeAS@N?(olHy`uVBq!ia0vp^3P3E!!3HFKxnwkf6lZ})WHAE+-w_aIoT|+y4HRTA z@$_|Nf5<7!BhIwv`IAVnkZVMVV`)i7ei6gUb!R+)LOdlvA(zzRc)B=-cyzvgUNYr265AqCl%zNx_&fTakVC@jV&A_nwD%bA2dPR+8 zyL+7$3dlNmbzXkS;(Pg>-o6N(1yi`@6bmyj7|rCdn(L?15MA|B&Vc9fvpE5rca%?W zO1Nz%k-RXdTH-;0g@Y#RQW3M+ye$Ij!q;C9TpPy7&|_F|Za%-k?6V3j49PsRmMy&g zy0Mt=^rj6ldWKTHK+QadD|i_`+kfP?&<^MmlcNF)fZSMS7QS;QYulZ$3m)qjT5UsDXSUNhEOj+{Us&sek zcTfG~=7S0axlMokkCw}N$Q*avf4{sw=Ji*pr$skwMQgwIu+(MQ&7ZvP^_IJN&S&eR km;yzAcfR2L!1jY_=9ANf8jMw6fU(Hn>FVdQ&MBb@0NI8i*#H0l literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-File-location-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-File-location-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..40838935bed5d38842c1c760adbbd713e00be9e0 GIT binary patch literal 557 zcmeAS@N?(olHy`uVBq!ia0vp^azHG_!3HE3EPS&CNO2Z;L>4nJ@ErkR#;MwT(m+A> z5>H=O_J^FpJlYCUC3l>_Laq@dj-@3T`9%yX*PZbI3h|Txg;oF&M`+;I?AY~z$B{``KE8bmF2a5dgba4#v=zM!^|U&~_@mSs9|FnYawH0$uu`PudTO=u<5X=vX`mo` ziKnkC`$JA)9%;#0=1DujLaq@dj-@3T`9%yX*PZbI3h|TxghfWjH}H!TD(=<%vb9 z46z0OLCU$ohG!Nh=OhA^7BOr;u%#a;%mES(Pb|vI%u8oDApNWzD8>%aUs{x$%JB7n z^J|zg=ltB<)VvagZ)c|M2a2(Ql!auLwjjNgsMB4tx zS=|afv1abl9n`W5TQfl~N?d#)f8xT)wamMZox2$M{f?%P;lxu!-5ZM}~_ z-uSie{o@j=gPYdGz5D(5*w?C~Pm35CTmqNO?GW1$wRXepw^oLyH&q$lY$@A)_ZYKe zGRNT!!qql%6?^0M-dVMZVZqt-o`Z#R3J)yHobbHzb-tPOl+?~mI*yvHi4qDeB_$K@ zoAl;I*cR-KQ|?P%T4o{hz@qO{07tFKhIQFC^ZnO`g73qiYLm|6b+5PWdtPb7!Ib*${*FwBhM-%w|7dhg zF;)BK^CZ~o_;jG9bNz~b*X?f>xYT*F`k2IJ-qq|vPFs%Ko&S7r(}dUGlNY>NHqn%! z`PYj0tXXOtinnHVNvC<3`v$MnUE+S_&yg98#szHu`f8a~Uw@Nmxw5et7)=bGu6{1- HoD!M`sfLr!5{e$Ewd&hG~cxki*YmX>7X7cs0{cg6!K#8Uzka!D;tF3Kz@$;{7V5av`= z28wfm#GUgCDvL7HGfEiN@Sm{)it>R)i&7IoN)<{nb5j{izw>hfWjH}H!TD(=<%vb9 z46z0OLCU$ohG!Nh=OhA^7BOr;u%#a;%mES(Pb|vI%u8oDApNWzD8>%aUs{x$%JB7n z^J|zg=ltB<)VvagZ)c`~e82`$7Lr+#lghB--6eGf2F4SfE{-7{oo~Z7u3O|FVw?Zj zDpU8()N2Y`7k=hH^M_%^57xQ{UipMvp8pO$Z#X(-rMxf18E;9h-FD-^E2FMA>(0Kj z=A1dZy4~`Qak^T~gd@8@zJ1FRuj2c$Qh5JaMt|#*pa1Mt*?pJq@kfcsX@3n*9zScT z*{pNgV5ScP!``^}PmeCUtjX5wsQQ29Ozz7jhBADD#|?k|{pZcH`YM-~X6?k3k0B3! z+g&zM_4Lx5slw@L)#Q#{%OROTW`&DPB$e=oPDa~dA;k_LiM8!zn3P9W57GddCxhT7`!wq z=7pbMG+EnoQc$+0>e4As@7?KhUCS3$uDNu>{r8N23iudGcE@gs((Q3ueCd$u+wE4J zi#oRD-mg8o`0$Knnzi@y?|C*JO$t1jyZyFT-rhK8&DNha>tfx#lO))5P9J($P~pkT z(D4`;Xa`NsW(BH;3ops^I$r3dS$ZMvtMA0;KZAw;h)%NlV_mNuukv5>WclP1GiJ1D SJd^;&GJ~h9pUXO@geCw84LCgj literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-Smart-Screen-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-Smart-Screen-events-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..7cb8349b6236829948936c079704d2820f5a91d2 GIT binary patch literal 801 zcmeAS@N?(olHy`uVBq!ia0vp^azL!e!3HGH$w=PF4%&ioyF z#SMM)^7r<5ah9LwRIB#m@!j9?XMg^m{;K|wJom{$nK$37TM{`K zR$PB=;49pGaKQyT{qov5kujOG9#z;JDvh0TI(5b}PS-#NhC-RcrLiGeq9wayA2O#j zU4LzAbKY6Rwd1jc`6d(Jjd$}l-pq-sRrNe&&mnks-ujf=W`@T)iv2t%)nuQW^8WV` zOZ8(CH@D4wIXyaNl8WPHlM|bCrr0qAgo@5u<~V7I&wK@rdl}YKy_U+aTfOR6`oXPH zx|gSMt_xeeBW}Gt@7@@_o!@*4R$q0JXya&FVDP2Hijl#@SDSBIs^r@;>Gs154Q_n4 zDY2ScvwV%6n$n{=!JBWY-2dMCdq%O}u66c*)Wm&UOy-~OG*m0;RPl6bOT19Dv*yKb z0Uwtm63VAH$vH_To6Pl-cd~r`)BL*cwp``DWS(~CC7HkG+Hx@UxG9@R@t#RD-smLI z`9o}CYGjH8Tj9C*>*c#;U+&TqdAYac*rUBN#}8(0by|NN7$z3;&(H8td-45u(!{#J zM1v2OTf2`kbuCJ;krS6v+RyS&wrcj}m$HBO>bmS0pD8Z$ky&>11u!Krc)I$ztaD0e F0suGeKyUy6 literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-access-token-modification-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-access-token-modification-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..4155bbfd03ca80ccadc908c8af4475475de197b3 GIT binary patch literal 738 zcmeAS@N?(olHy`uVBq!ia0vp^3P3E!!3HFKxnwkf6lZ})WHAE+-w_aIoT|+y4HRTA z@$_|Nf5<7!E5Mq=&9WEhX0HeP?QfWT9ldyQmRmrnVZUB`kkK>D8mVo3C>R|DNig) zWr!{K4^qwzHaxR9IVTaQw1{E*fi3+&VGfXRcw$jrW?nkO0qJM$Kryh>g7Zs@l2aMJ z{%?K_Q|6qXo12B8 zz5ex;s-KvSTuXY(vv8UpcXqOqds1f70wcqXqS?;53q^l3wVgZHb%b3YW9hurD)XN2 ze3ZE3(EgZzlKXg!4^Qjp2v}g(Rr6E&0q+NW2D{BO!dHu4du__s&dlHtC{nUJ_Dj{? z<&0kaZyGK74CVS68Rq)2?^?&qVDbD$ju}J4%MvcnNpZ{uv(FY-%{7?mlV`U*S9+=! z>*9+V#ta?{6gWICn{+MeusN@MOrmn$_p`#Tf|;}290fWq{hhFZv-W=bs#WEuwLOJG zLR;Vep2@9{b4bNg;j|Hh!}YIUe#d)HOI7ilB*ShTapfTy+dkb%qEu+#Dju4X0f zzN^%ioVe+4-F$n8y>afl?;fkM+yC0yza#hdPbP)~2?hr~R*L4w#(1QqJ}xH@_zM*}=V&9$Ord06NmLZ}Pn8X|B^!IUoP$ zDc~&PbZ{||;mh0^bFcUG*Zdc|^k$t+yCvMUh@;#&k6~G6()Qa6@4rv)sy;oF&M`+;I?AY~z$B{``KE8bmFXJBA7@^o0?&Pgyo|C29Z)m!Jq zv9aoXa0gJZtl99JT!+8K#!7?V`|95v+1s_q;r2EI9_B=eLxppq7wep!pwek}#DM3u z;*u#VURM=P*fgiOFLRc{QWixQ?ngyC*R;Rb#kVX|FY9|GXA?tcXk*YSR>q8!L#44j zk9Vx#RLsi@@Cux^)Qn+6lGPLr#Sb?8g))atd|MKKWM}2vcDroyp|;-CVczqqgG;8^ zZL#iB^3W`eI<#rc_x>0ASw0KvKg+y#P`&uGxUhx7zETGbSphHhmP?`^DpR=*uqoGGN|f%F0IUHd|&3$P0MHQku_$0}L2>eGL*5+x;#Gi$dnTu_NK;auve zQU032Sb6D|o#uVY(^5A^cTAL6d_=;0KL25b%O;WWn#+$poWsm;=5x+0>%GEK?XE}e zblL`a<=4LaEvMLW-%~)aVofQb#A|{YjSz4>;-xbOcu?yVb!h>;G?5GzEH!!PC{x JWt~$(69DyQx0L_@ literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-file-observed-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-file-observed-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..42da4ee738c48432587e7a0b89b7bed0d2882898 GIT binary patch literal 486 zcmeAS@N?(olHy`uVBq!ia0vp^ia;#O!3HE%Vpw+qDb50q$YKTtz9S&aI8~cZ8YswK z;_2(k{*Y6M&rGJ!zy19WEhX0HeP?QfWT9ldyQmRmrnVZUB`kkK>D8mVo3C>R|DNig) zWr!{K4^qwzHaxR9IVTaQw1{E*fi3+&VGfXRcw$jrW?nkO0qJM$KrwcR{?el4REDqr zn_t6}Ip^o*rskC}d^+U7ZhaCo^n+0U1^8)mnFXig*_ixsWDWpUF?Vj)VjF&E{ouuOU=}wW(X(omfmi$lW-V+Y$ z6BI1<&v>!7{!4E$pJK~@&m$6o$#>4LHO;xb?9|?)9kW^zK<26`^5mX*zx7XdX>4fW ifFDZ*Bk+2_Yi@000VfMObu0Z*X~XX=iA30IUzpIsgCw4s=CWbVG7w zVRUJ4ZXk4NZDjy8_YVmG000SeMObuGZ)S9NVRB^vU2y+80000BbVXQnL}_zlY+-3_ zWpV(wz_gD5000PdMObuKVRCM1Zf5|%8|H@q000McMObuGZ*_8GWdQa6gX;hQ00?wN zSad^gZEa<4bO83umcIZ100wkLSaeirbZlh+sP57y000IlNklvI&x6~%wI zyJuf$B^hDB1`8a?w#qyW3)Y75AP(@}D(CdVk)c+TqI>GLM-M9i5Pc|N47DntxWq9zs{f)ht*1kAv65{G7z=4u~V z@HAW5_XDSz{EukO^C5X&u(9!&q5$Fmt4~wJVL-dx0SxB?SOTD>QAr({s$9JAE+8~p zCyS=(s~m?8NGXbv_4RcgJi1FURElB;5L|Fz4ilK2c?&Zmcu#N%XqoF6Tr?%m2P`iw z(`UNkxKg@LU0c7m?+(u)1ZP6g0nUNRav5v zK&UEDpFCmzpwB1QKA}6?{Eq;S<=0{CY(C_RwROJ!(=DnZ;=MQ2oA_xN(iN*AC0#2tlqf6_0>T)#~vLKxx|j=la4%h#^b znV-j0)3DJU=}Um%zA)z#=-6;m?5r%WF1sOU7(>fXuNQ?6L1=n=a^>2 zgHR&)l!an6yQesN`2vgYTwwXy$EeoF`6Bax6EH2Yn80g)i+)Vp6ey8EB|@GEe5QboDBgR%GGTmA)*EpRHaee%@na|2a)OLjkdg ziiwpGN9?zc-amnAhc2d|N)QM~0wF;jXmNZLAF>!DNL>$AFohVwsp2pkV71R_Hr{%( zomxuTl-A1|fFo8B#89ocb@w)yacSj4^1%?(i58JMK?LyP5tOyxf6k+48-%K$@+|<` z29+2MjAnqS)Ah_4oJgup;$hU)Q}s$^A!6)oZBaZOAP5gPH&S7Zb*oD>AVdUc_|!Ev zpFXDd?R^?^Z_#QwS{MmdiI|c#!KteQ=ooNEEtP}Zaw-!R&MwpiH?sBJ6N;iwu{p%~ z0LWMikK_@isSw8kl|a^=tOuq7`P;odo2V_Bve&JLt4KWM0|c ziQN9%H}v~M_WOeO0p~p-1pJ{9yvGNhBvS}@@A2M^ue-fHb_YZ5+`WexoLlHJbE@+S z5XT;?F}JY5^3~7S`r}Q?qT=T7ehU(zAs8ij+A|O+F~kCdq(;R1v8Qp}k7fFu1?F62 z_1YEY=DQQ6KLz2GDFrIp^KWx?(|f~tk8_Ew zgwmmsgn&9nX~sJjFLUEJzvjxyN3>m-fSZ!8$1vvsr8Re+kFQ)HxE42kM(^q084d)E zWy&rQ)CGJjY0b?80p}f69Zh9bV0GpPH7+fl=f-EhVrA(kv|QrUv~K0`Wi(Ut+-Mus zc=e!P^5DU@Y;WABD1|}3lN^T(7a9o0scyGU5>F9FFF0}HRpH$Ex4FFd9y6zAjy%mp zt+V6kK^`ME$7K~rigwU1*y%mT%qU`2za$DchaqH*$y=3~8v`159y4Z7&(w)FiOE;l zG2mXd7;D96GJbgNVf<&UobcnKC1Z421I)ay<^3B3_a@BD5HoNmdzb&ef_q*2QU43< Y-yOsd0)Zezg#Z8m07*qoM6N<$f@novQvd(} literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-module-load-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-module-load-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..6e071edb03023f20bba22acaea08ea0af917c417 GIT binary patch literal 757 zcmeAS@N?(olHy`uVBq!ia0vp^%0Mj7!3HFA6HEGm6lZ})WHAE+-w_aIoT|+y4HRTA z@$_|Nf5<7sr*0uPb%!um$TgzGv9u&3zldSwx-%X?A)XSTkV|TDa#3bMNoIZ?gD|He z$b2r4xO09%Wl?5&MhU|j{xeoUQ9iI}QEDPcsX|F+ZYqQ6cYaQw3@1n?I6tkVJh3R1 zA-3Q@NI5sy@XX@moJ63~B8Ke;wt$?=0TK>REXvEwOJ_JB{j41*#tzY6T9lm1@b!Q5 zYnU?U{M_8syb^|QXQu53im`!|g=CiGq%y2{cS)Urf$@N+i(^Pc>)UAy`p;lam6LWaSu&w$ z=k6B$gKsu$j!#qH{oBo@#s1LmeD0d1(^oDAqsRYGaVS36rN?lfG?qirYO3UxpF4HD z3(g(1WM}YEo9vhB!0R!oCFi!<=}j6u&PqyLhbQQqR=T}S({qwq=DbTQj8?63x@@A+ z#dO$!fuSw&L50mC9q$#ZZh0n3eLa(5Ql)usWsd+;<}9VIMXNGf1v(aSWX^KpVANEV zIll6lMIWpozP?3bNBe{juIv1rAJ%|RgQu&X%Q~lo FCIC&xFp~fP literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-network-communications-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-network-communications-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..7af075b0d7e19c0d4f683fc61e326fdc8b767a61 GIT binary patch literal 686 zcmeAS@N?(olHy`uVBq!ia0vp^sz9v7!3HF6%of-Uq&N#aB8wRq_>O=u<5X=vX`mo` ziKnkC`$JA4K1u6ik)N)Bg0W#*+b9FTt24isaD=r1iwPG$J| zzxg#xnR9+_Zfaf$!?!cj_5;P(K*~ZgOL9^fR=m5U&cMJ}>FMGa64Cm0`o_K{2NBo) z+kLv7wh7ruIS-kyL|JL=Yi*f!{sZ%ym!(45O^xymVXtl;a(J4S-m@#uXu0yvlh$`^ z;tsiJF8yJ!?_bmdxiBwr?WNsQFCF!I`DwzGDMFf0FK<>pHDO!s)wIolp`nsbZ*RLg zFY!*uyyr&>&(zp0f4xgSdP2~pQrW)80>=$2=j~s%^5I(cNh*P^fp^Y|xh|ZfB01mp zmQmI!9q%RuiP-{90&R*6k<&Ittv#`cr@??n(5c6l&CwxpT2yh*l3B|fIT#&cuUE`t zKk%@C;X#EB(}w%+89&(cfBwnSAkefdbDsWJy`Cj8*O$JpesIkx_Bz9w>)8z3ZtF7a zzRR~`>&^%rh8Mr(u9tpgo2j!a$jdeG%Y{YmfnR31vVW+pzcbUscc$O+^5V@mdrW*A zZ};oF&M`+;I?AY~z$B{``KE8bmF2a3G*ba4!cXni|$hkDI+; z_@zx8s>&M}ax*5b?s0T{%4o!z#B@sMkU&i7rOw}mKa}2a?bqs>^W@|<9o6XTqSEus z{1kTU>)BWQQC3q)bP|FRg?FV-oZ(PhAzyT^vEve_?9LKyYrlJM zv?TA9gz~i1i*ohdQ5o~nx8!z9Bzwv46%btb+N$C`|5TSp0sOfuUrSZaJ6z4ru)j^7B$4q=B+89$K)h7P*TCqyY#J72oMx0+^?zJmU{gH}`?oWBs<2m=H kd*Fc<6(5g7AmS0*Vgc``;!nOm0(zUl)78&qol`;+04eCe3;+NC literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-process-event-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-process-event-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..c48ea6e880e4361051508d1c45c7f66edaf9ed85 GIT binary patch literal 895 zcmeAS@N?(olHy`uVBq!ia0vp^DnKmH!3HGz_vU{CQk(@Ik;M!Qd`Cc-ajG_-G*FPe z#M9T6{UN6ipPc+w>4rmKA=ii!$I_CF{33>x>&|!pg?LJULN2Mr$wiq3C7Jno48oj> z%0O{0khpVxL1j^9dPWJu8vZj@Kv6!hXi;h+NU1_eW^O8j>34okpbRHSCOAK>q&%@G zl_9p^KS((@*znBalAKhA74I&oGcYiDdAc};M6|x0wsE~;pvbZP z+w-}5gPaykTyT*?>f(i2SspIVE!InaaCf*U-+F1P6&%p(5n>`GbW+5rWzvkMltp&Y zIX9l)e6vS7zx?UZ^?QCk+Z}(-_W8X^MWsW`AK%uqSDZJVAbH*)&4zjA$FEG9T}+;n z45WG)7#3gTn55zuIHg`*L#o&5vPs9H4!6aO3>hX;0c!}Z2d%u)>lY}J zVZQuX)*PZWHN$G|y$lw|1%K=Ecd>^DpMPG=;IRJs?lmuW^?5CA za#3nLnbMSF*6p>FDfYVltj|a0?*G4qYwqeJ5{uI|d%C#1Et~!7>#wP9(^9jx-*$1i zl4I6s=+=Gok@LSh$@La8KBmhrcV7P{ZgW+VuU&Y75@;`t5Ct*K3UBOsR?*jjG%>!O_mF;JM>5ReC)z4*}Q$iB}Hu!a~ literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-process-injection.png b/windows/threat-protection/windows-defender-atp/images/atp-process-injection.png new file mode 100644 index 0000000000000000000000000000000000000000..f4788b58336fd9194ed896e2535aadeea315650f GIT binary patch literal 897 zcmeAS@N?(olHy`uVBq!ia0vp^ia@Nu!3HGf><~N!q&N#aB8wRq_>O=u<5X=vX`mo` ziKnkC`$JA4er7SFOgmq&kZVMVV`)i7ei6gUb!R+)LOdlvA(zzR0+wU!%D06K7 zox4d}XJ74Zmi1BWY^|twxa>H~qO*}_5>KxC;|FOzix#~5dOYF!gr3f279Q&-=rUS+ zCM(XK_k88#J0%@W&t8gfHO<(~!g@0Ozg^9}=YJ2rR`RqlK2*%j5Zn2`M0FMj#XS1< zO)UEU_67ffqUTMt(pB^n%Bs&gk+xZYg>j+(!sU~9?AzzIFyg?3YK~qv=4q*knVFn9 z0uKv*yj0oN?fPQ*@`BTOPl_u=x>%POXHGZ*1kIaet%bwG!+{2vo0|)`Fs}do>%#9< z;?q(UH_vd~8B4e-<^e2mt4|(^Z(xQ zoFuVjnNA`{k2lXTTkzT{`J+VpeZJz<)Ye(c3iI;%?B@4d-?mmcxqJ8SX`5n}{PjP3 z@uJ`)ZcmA}#s}>R$BrE<`0-ufmA~le)2BOJl)f>&H7ls8IrH*mCL0r@pReyl10FT; zNiwzer-D|dnD?ndqeo1i zPgc&6Opo}zjV*H8#mkqO*I$3Vhtb+MW7e?@lT!g2N1B_Pw}scupSEtrs#OI$V**52 xnVFg2uKy#~cdyg$v(f%?zZYI6FTG5Dvd@=F(05UP-vmr)44$rjF6*2UngEvSdYb?M literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-registry-event-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-registry-event-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..12f8d99c9b4502c7d757f894b451351c6683d409 GIT binary patch literal 553 zcmeAS@N?(olHy`uVBq!ia0vp^DnP8r!3HEZp5@dAQk(@Ik;M!Qd`Cc-ajG_-G*FPe z#M9T6{UN6ipRr_3P`w0L$TgzGv9u&3zldSwx-%X?A)XSTkV|TDa#3bMNoIZ?gD|I} zGEkfgB<`GFP+63jo>9WEhX0HeP?QfWT9ldyQmRmrnVZUB`kkK>D8mVo3C>R|DNig) zWr!{K4^qwzHaxR9IVTaQw1{E*fi3+&VGfXRcw$jrW?nkO0qJM$KrwcR{?el4REDqr zn_t6}Ip^o*rskC}d^0JRmN+OFnj{fKpFm9e%ZaX{ngy>D>(4~J?ZoOu3tm1kH$7dU6h9y(97yhmhz7|!! z$5k_RYS6uk+uOo8K5kNL`EblR#d_1Ob$jETygD;y8T36~W^=P;TI$DZJjRPNrM}eG zuL-zb%Fh_i=COL=n%HMzpVu|H9n<4>bdhLF{QNIF=-UDAE!P+XdX|5X4?nIhvQXlr xYi97mAy#xB6!PC{xWt~$(698o?&Ex<8 literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-respond-action-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-respond-action-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..0ceed7cfc664fc29230c8a7de73e1635e4ead6d5 GIT binary patch literal 936 zcmeAS@N?(olHy`uVBq!ia0vp^>Oic_!3HG7jf9nf6lZ})WHAE+-w_aIoT|+y4HRTA z@$_|Nf5<7s&!}@OxV086iU&OF--5C#{5KjqE$R)KnxhS)sBr`vcL6}n! zWF!|z+&RCXvM4h>ql94%{~0TwC?8m~C^ZqJRG}m@H-L1 z5L@scq?{XUcxG{OP9jig5ySQaTl#^*93bKF#G<^+ymW>G($Cs~V(bw8rA5i93}62@ zzlJGu&d<$F%`0K}c4pdspcorSSx9C{PAbEScb9+x!Bp(&;usRq`gX>CZ|Ojp1NQHO zo(j2KOk%!vFxzT}NvVlpwpn-g>{yxCDtuG9rgFsvEt*t+AlBu|(Wd%_#jO7sR&p%6 z;V2`M6!-4#cIS(WR!)-Ve>H*s&ZoV<>)sc?e^-0|@sth@f96vA2Y>jxt1?fUdPlE| zyj67e(zNVp>bl?8+~d}s%60ts@s1YVy9PY16*hi0a@*C*tEx_2`K`I-nnr24qzFss zZj);YN*QZs{xmpz=gu5kONQ2@e~)cu`mnA2I=5I>R+h!_fb(yTr6N(;Y3b>LuWo0X zsHl5+?D3o6q4MrXe_x-4wYBo>vv%|JoyyC0Zojce4 z@?is&oCmYF8bw=MTWd}~4HUk6H&$A;kuCnUa|g%843X=lnrlQ1ju}{5-YkmMR#sPX zxvRlFU(BO-*@t4g+qZA)Uf+7HrPr{ev~=U1J!c}SdSdL3KYNzuZ7Mx2_}u>AGZiF~ zJB}v(*ypb{IWe`gb?w@<`*(U>{o=8@XxFFZ`!m;OSKZ~cwYAl$jZ8{OY58;AMp{~W zyXEz#uXjnAnHVVM?W$fFkWgDYH^8aKuwvfv-5(2;{8+A+TK=g!aqE>7!}I;;cJA7x zH2u6_r^}1CZzopr0Q}U6#sB~S literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-signer-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-signer-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..44f431e3f7175e029218e1b314c2ee16455f5a83 GIT binary patch literal 633 zcmeAS@N?(olHy`uVBq!ia0vp^azHH0!3HGvF1f=4q&N#aB8wRq_>O=u<5X=vX`mo` ziKnkC`$JA)9!;jdO8-^BLaq@dj-@3T`9%yX*PZbI3h|Txg;oF&M`+;I?AY~z$B{``KE8bmFXJBA-@pN$v@#uVeZGB&}feibH z_j>9Zs~b60xZD%OYM7^<5t2(h{9wZehO0JgEbUI$9$i>aoppL*%!{%MZzernt+1uW zqyFz_v`Sbs`N#Fg>bjU?&wpC>GPnZ0R(%K74n&woDp{Q0NOy6dao zgl^6;y3!)RaNuoO^{(@2ru+E6Zr-uw*!dPiv)Sy+FLO>m?W!wt-0+b_-5qh)#>`nu z{w^sHV6l+vf4%QryGQn&@3tCC4Sa>C1cihym3uZv*;B|Ruw`4WpsU~}9p>jTx_3-? zb8fdiwqRg5UYKy(Y}T?s?$u|Maw5fE?W()7b(PkYQr^>>!VY(Dj=EmDV_mn3r$L{x zi7&Gv%dT~+Ti+|T95CQ1iQO($!})KYc5C7e&YB5--%L&AWcX0~ztEQF@S{M{XE z)7O>#A*V2pfYt3Kr+^|rA=ii!$I_CF{33>x>&|!pg?Kw>34) z&))AhzwDRq?K4k{9%}73yL9IG;sxe^sy?LOVf_4a&f7BYjS(yf+iySIr8n2_`M&}I zmNnP2r=3<^ewkCDW$U$!wI6Hehpl#9d~rjQ@v_oAQENZc&VT$-BI&v$4;zDySa-eY z@xl{Ni;m6AFq{3%+HU^&jJ0dm{mbWTXZ~QUT_3D9b>8Keb+7H%*Ij@8^3ctkYZ2a} z=bnE)Hf!VR%Y7SHH!C=3rpiccox{)~kYgtOxZ-h$x8};Q)yEpQ2d%!U^m^j?9oJv0 zI<*Rv?7sV?U}wy-yLrdke*d*=byBqCF_7yolsPUH>SZXymoJyTb&k#X&4;E2`795f z9enFxkeAK*?woBFD@_0No=-D&TP*0*QLta2>12u!cWaCOguiw2b&Xn6xq?nbWF-BN itK2((ulb)1HH@lPOC=|6VEYJ+4hBzGKbLh*2~7a#%@j8P literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-windows-defender-not-detected-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-windows-defender-not-detected-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..bc8c7f03200ce5d8864448b6acdcdbc3c66403d1 GIT binary patch literal 772 zcmeAS@N?(olHy`uVBq!ia0vp^ia@Ny!3HER7Hl{Oq&N#aB8wRq_>O=u<5X=vX`mo` ziKnkC`$JA)9({>0sf9PdLaq@dj-@3T`9%yX*PZbI3h|Txg;oF&M`+;I?AY~z$B{``KE8bmFXJBAF@9E+g64Cnhn(ewx4ic;n ziud2S7W9~@K`Lt2%AB69mnFp?@TF)aIoazSxZ$X47G_eSa;1$`LNoTj&ZFWz`*(Vr zxq4`_fRTP;g^~RManC(g|KoTW?y-EVy;yhh&Yq(lH3Fgcm2fmj}6r(pDY$&$SS?|WuF`OW}VYfTX$u) za2yu!TA3WJ*=oS^Uo4P!W6-OP%934vpI?i;EwS>r{AJa<-*#-xj0_1|qhe$AyO`F! zzUK7DN@!cI^7+rJcLj0vJw8x4XYW~KctXFYlOaoQx6g#t~#|ISnCe|~vRoUoID=cMYpu}j68RJLB55_FGcj?)0xWSEMQqSWVP8?Zl zS8iP<&{Qa6&NLzA?fMs~r#2nQF=J-%SsuLQ_S;?C Date: Tue, 19 Sep 2017 09:18:30 -0400 Subject: [PATCH 02/12] Update menu items --- ...rtal-overview-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md index afcf94174d..78e521eab7 100644 --- a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md @@ -66,7 +66,7 @@ Icon | Description ![Alert icon](images/alert-icon.png)| Alert – Indication of an activity correlated with advanced attacks. ![Detection icon](images/detection-icon.png)| Detection – Indication of a malware threat detection. ![Active threat icon](images/active-threat-icon.png)| Active threat – Threats actively executing at the time of detection. -![Remediated icon](images/remediated-icon.png)| Remediated – Threat removed from the machine +![Remediated icon](images/remediated-icon.png)| Remediated – Threat removed from the machine. ![Not remediated icon](images/not-remediated-icon.png)| Not remediated – Threat not removed from the machine. ![Thunderbolt icon](images/atp-thunderbolt-icon.png) | Indicates events that triggered an alert in the **Alert process tree**. ![Windows Defender AV events icon](images\atp-windows-defender-av-events-icon.png)| Windows Defender AV events From 1a82ab1ab32c8774b210c04dbb3d2d2d1fae0bc4 Mon Sep 17 00:00:00 2001 From: Tanya Bittenmaster <30839220+tbit0001@users.noreply.github.com> Date: Tue, 19 Sep 2017 09:28:45 -0400 Subject: [PATCH 03/12] Update menu items --- .../images/atp-Smart-Screen-events-icon.png | Bin 801 -> 750 bytes .../atp-windows-defender-av-events-icon.png | Bin 678 -> 661 bytes 2 files changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/images/atp-Smart-Screen-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-Smart-Screen-events-icon.png index 7cb8349b6236829948936c079704d2820f5a91d2..07483b5a90532a699e62dff51af08b7a7f01fac0 100644 GIT binary patch delta 518 zcmV+h0{Q)+2JQtRiBL{Q4GJ0x0000DNk~Le0000O0000X2nGNE0K)=nosl6S2Mrtq zx3cn(kxAEoxk*GpR7i>Kl(CMgKoo}mz1dEuB*9jVFJSC+s4SF@!g&kntb70yOL~cv zCU#mVg&Ci~c90$dr4Mj!%CA1)&BZiBL{Q4GJ0x0000DNk~Le0000U0000X2nGNE0L~m6+L0k42Mihl z2}zn1kxAEo>`6pHR7i>KmA$T_P!Pxece9;Rl3?oxFJSBxDhs8f@c0r+XJuz&Vo5KN z(!@>+r7*`Qum$NMQ2GF~#jZE*2YA>oH+SzpAt7gm^E)%loOvN4JVPIzLVYIqVM)N3(0XD?DuvDs{1eI-fCKL`=sp08xv zHZjJCb52Q;d~42>@B73#C&n1rww>vhTU?SPLDMwIvMiK708mvGnx;XLq)eY62;OKr zl}e?5AFiva`e(tlS}oI-39eSFxL&V64ZU10x%NzOtJOjnh6sY7F!Xdf0RS{jD-M=r z8SQo(hr^*T*z-JeI-Pu{tUe|p;+#{n*(Bfhh5MLuPP(o?{3aJnL^Pkzi7_U0i6luv zhGEchxqRsR5KKhG7$eKF9zq#oG@VW#LOJJu`8U^1wrwMhV+@Bwq-pw{JqQAfMk6#D z4a{aUu|g1u_!g06S!5Unan4`Yce@?wx-Jyyy@bZ%y&T8EYPCYI*FzLVIG@j$OeW~} z`(lxPQDHFfIkk($0*azwJRTPsBEJOw9eSJ7=^gwIeu_Q;<{_p`9HzzS00000NkvWt IM6N<$g48|vtN;K2 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-windows-defender-av-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-windows-defender-av-events-icon.png index 5a5e4bb762f14d080868cec1b6ffc54cf20eb5db..2c6cdcbf6eb15ba8626715c7b7d0ec160aa41101 100644 GIT binary patch delta 428 zcmV;d0aN~_1(gLMiBL{Q4GJ0x0000DNk~Le0000S0000U2nGNE06)ckpOGOU2Mrq$ zl`eq1kxAEoU`a$lR7i>Kl{=2YFc5}6R@-4ppCAz}5)vILDNIKJ9j}@L(8C3gasW`u zTpgCWN=dujHUj^W=XrPSxo~K6&1MK8GP@9h#bRLvg9i(Lzu#vaq19?3rL?{G^M9Jx>K1R{Q}hLh WjdB^fEQwYC0000kxAEoaY;l$R7i>K)-R62Kp2PNm(4l`IVYgO5=d}>s~Cbofa9O$0C>0nNe=)) za)k;|*a?>4A@mTe+Ah1BDbt36fS+r>PM>!AP20@na^Wh!Hqy+;qo6nZdhlo50rUBs z?RHDCSOj3V+u^z{olfWea1aEn*K3x`C8yH~AcVDl)@ZHqeVkixHk;-*>PTY}Qyy70&1L#+tFK(~hyLgCIaDWgHl_oB)InY&IL?c;i${DXCVg#(}p| ztJNZZ>ygj6*Xt!hg%EVR-Q;k&T&CS_$A z&$GgnQcR~)n^W4sQc66}i)^+ys5ShJ&t@}5qY*-gaK8|O$z&1>g@iAV{eB;Qfhv^> oQp#9pV)!0;y`Q}|{IGlhCDnBqk+25w0000907*qoM6N<$g8PEZqW}N^ From 788cf1556dfac6c0787a3f00d20f0cd8b3fc1152 Mon Sep 17 00:00:00 2001 From: Tanya Bittenmaster <30839220+tbit0001@users.noreply.github.com> Date: Tue, 19 Sep 2017 10:06:19 -0400 Subject: [PATCH 04/12] Update menu items --- ...e-location-icon.png => atp-File-path-icon.png} | Bin .../images/atp-command-line-icon.png | Bin 0 -> 582 bytes .../images/atp-cprompt-icon.png | Bin 615 -> 0 bytes .../images/atp-process-tree.png | Bin 0 -> 659 bytes ...tected-icon.png => atp-unsigned-file-icon.png} | Bin ...windows-defender-advanced-threat-protection.md | 5 +++++ 6 files changed, 5 insertions(+) rename windows/threat-protection/windows-defender-atp/images/{atp-File-location-icon.png => atp-File-path-icon.png} (100%) create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-command-line-icon.png delete mode 100644 windows/threat-protection/windows-defender-atp/images/atp-cprompt-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-process-tree.png rename windows/threat-protection/windows-defender-atp/images/{atp-windows-defender-not-detected-icon.png => atp-unsigned-file-icon.png} (100%) diff --git a/windows/threat-protection/windows-defender-atp/images/atp-File-location-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-File-path-icon.png similarity index 100% rename from windows/threat-protection/windows-defender-atp/images/atp-File-location-icon.png rename to windows/threat-protection/windows-defender-atp/images/atp-File-path-icon.png diff --git a/windows/threat-protection/windows-defender-atp/images/atp-command-line-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-command-line-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..dd01894c3d86303f4a984d03cae45752179cc465 GIT binary patch literal 582 zcmeAS@N?(olHy`uVBq!ia0vp^av;pX1|+Qw)-3{3oCO|{#S9F5M?jcysy3fAP>{XE z)7O>#A*V1OtKL_C9d@vgYeb1-X-P(Y5yQ%LXFPyHJS9LOm(=3qqRfJl%=|nCVNOM5 zpg0#u+&RCXvM4h>ql94%{~0TwC?8m~C^ZqJRG}m@H-L1 z5L@scq?{XUcxG{OP9jig5ySQaTl#^*93bKF#G<^+ymW>G($Cs~V(bw8rA5i93}62@ zzlJGu&d<$F%`0K}c4pdspcorSSx9C{PAbEScbC)|7#IaTT^vI^I^Rw+>}oNPXuZ#K zJF-2-frVSzn}34xl5>ogq9ZF?WfUIB=IH3W&Cy}WSJ1R=2eRmOEb9Q#sE(+iT_eD|3oXe3P@&=g$ym zQt=EBVbxfg(DQfJHv^uF-)%3Ml(MtETlvjv=5xy)!?3t>{gXF8th#o#G}88O$=>_b fHBJ5>ILnqvSAU7&in4PCr4$BFS3j3^P6;oF&M`+;I?AY~z$B{``KE8bmFXJBA7@^o0?&Pgyo|C29Z)m!Jq zv9aoXa0gJZtl99JT!+8K#!7?V`|95v+1s_q;r2EI9_B=eLxppq7wep!pwek}#DM3u z;*u#VURM=P*fgiOFLRc{QWixQ?ngyC*R;Rb#kVX|FY9|GXA?tcXk*YSR>q8!L#44j zk9Vx#RLsi@@Cux^)Qn+6lGPLr#Sb?8g))atd|MKKWM}2vcDroyp|;-CVczqqgG;8^ zZL#iB^3W`eI<#rc_x>0ASw0KvKg+y#P`&uGxUhx7zETGbSphHhmP?`^DpR=*Fdh=kW-kC#Wcql94%{~0TwC?8m~C^ZqJRG}m@H-L1 z5L@scq?{XUcxG{OP9jig5ySQaTl#^*93bKF#G<^+ymW>G($Cs~V(bw8rA5i93}62@ zzlJGu&d<$F%`0K}c4pdspcorSSx9C{PAbEScbC)|7#QO`T^vI^I^RxP-FL`A#DRZy zDT^hieZvYT2C3Eu4+AX>BxJaLFyz=X^d599bySkN((#RZ*(ClQtIL>Mj&C`THu(Z1ut^Rr9|TSX_AhHNb1(ltm$03%B~|Zsp3~8I!g(O7OVh?YGkmcnW3M zJtV6HEo;{$^-MgOqBPaZ_14>MYp%bZU%u}3sSFdLWloR1ZMJ~Y_w4PGkJ z>(+cX?|9P24OSN|JwIei^RO|nI2K%s*AbKCYu^&3ySi2FUZ&mrY0hYjFa?nUNogrwEp|E37*C;mG?2IN^CM0Zut`o40{Go LS3j3^P6 Date: Thu, 21 Sep 2017 09:11:29 -0400 Subject: [PATCH 05/12] Update images --- .../images/alert-icon.png | Bin 1489 -> 1600 bytes .../atp-Application-Guard-events-icon.png | Bin 782 -> 803 bytes .../images/atp-Device-Guard-events-icon.png | Bin 767 -> 773 bytes .../images/atp-ETW--event-icon.png | Bin 1415 -> 1418 bytes .../images/atp-Exploit-Guard-events-icon.png | Bin 733 -> 754 bytes .../images/atp-File-path-icon.png | Bin 557 -> 582 bytes .../images/atp-Firewall-events-icon.png | Bin 702 -> 722 bytes .../images/atp-Other-events-icon.png | Bin 765 -> 820 bytes .../images/atp-Smart-Screen-events-icon.png | Bin 750 -> 782 bytes .../atp-access-token-modification-icon.png | Bin 738 -> 771 bytes .../images/atp-command-line-icon.png | Bin 582 -> 595 bytes .../images/atp-file-creation-icon.png | Bin 510 -> 534 bytes .../images/atp-file-observed-icon.png | Bin 486 -> 501 bytes .../images/atp-module-load-icon.png | Bin 757 -> 767 bytes .../atp-network-communications-icon.png | Bin 686 -> 680 bytes .../atp-powershell-command-run-icon.png | Bin 544 -> 538 bytes .../images/atp-process-event-icon.png | Bin 895 -> 896 bytes .../images/atp-process-tree.png | Bin 659 -> 682 bytes .../images/atp-registry-event-icon.png | Bin 553 -> 535 bytes .../images/atp-respond-action-icon.png | Bin 936 -> 921 bytes .../images/atp-signer-icon.png | Bin 633 -> 666 bytes .../images/atp-unsigned-file-icon.png | Bin 772 -> 775 bytes .../atp-windows-defender-av-events-icon.png | Bin 661 -> 682 bytes .../images/detection-icon.png | Bin 3261 -> 2827 bytes .../images/not-remediated-icon.png | Bin 2467 -> 2440 bytes .../images/remediated-icon.png | Bin 1278 -> 1348 bytes ...ows-defender-advanced-threat-protection.md | 2 +- 27 files changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/images/alert-icon.png b/windows/threat-protection/windows-defender-atp/images/alert-icon.png index 941d86758663184d106fd22ff036f26b1070b2d1..e0a2657c175cc8211b45e5ba513bfc691a2ccb38 100644 GIT binary patch delta 1379 zcmV-p1)TcP3&0E^iBL{Q4GJ0x0000DNk~Le0000X0000Y2nGNE0MT%;!I2>z3gHPA z3@8;sffRm`N!EV_3rR#lR9J=0S3PS~O&C3MKP@b*#ZE{eh!}U*tZSNB81f%v7ecTy z5X2y;5Q}s+Ha3!IB?y8=jKYG=k}m{Nj36eM`~pD&x_jsAyhWVh?q_0rd3jHh?46ls z&OLLU=b0-=5=Vr!762fGfVCE37=k3Elt|OG=X|#&iXwmiJnEYH2M|I)2;nzyB+@hm zNk5h+oZs9b_*)VVS(fbw41%^XV+>lY7J?vv6TMS>an$2bN+FJ8NGTD=F-Up>4%S+b z^a=?fx)cKbLJ9X~Ns>SafglKAjDfWlT5CVYZRq|grMhArSqT7`nVG@r>Zss zF&G;g!~B2zJdz}7Ti2<^k&U^%y^VM8-r?lQlNcHrg4P;Q6hSG4&CN|{tuZ+{>5b?% zHpa9W+70%EQi>#LttClHDcgSExN(E$&YfeU(eQIgve9Vp;>C-+b?X+j)-=X+#mqk= z$-YWhYhjE*7>4_j{eB}UC3bgr@!`VMS=!Z5_t)Kr@%TnuAO zmx22lGf9%3CQ8#33kwVQ_3Ia=rlx%UCrN^pl@;vl?BLR+OE`V{G=vb)TDPTS7=~Th zG0+pvP}W+X4V#;rXfzrql}ad=%ODA*6oe31TwH{d617^*ZxlsQS6%4Dz!Y`m*b#6W zWm$iQYPAZb6oMdtwHE8^>-hZnGp<~@f-`5%com%y9eSxdkc7*3N9fC!FIZb!!|?Dh zip8Q=Dos;7dGZ8lnxa~*LI~l;^H3z5%npCwzJ0^S#s>aMP#3BQ3_=K`X^OeIIRN{|(bdHI)d_1YTdkJQ@0&MovQnvVWo3mVnPr(D zceNvrmoHzkR4TDpEb`5pH(j+MkG>?Nl)kuZZEbOQc$n9&T_Z{U{Q1+*%LkWIvekcT zv0ksUQmJrsbd<}>%OuHWv*`(U5*kRtVRm+wrBaEjtE)bcgVwr@Oub&`$jAtb#UhuM zmU@!y#J~n-t;O!{E~?ckn$0GZQb^MjQ53;ii&Ljg;ra9D5JDgfL)7ba+`W4jaUA2$ zojbUC^=eyVbI4cXfyM;(({g)z8-;&D0dX9|7=t89@c#XK?CtGgdV1QM?8S>0c=+%k zthKmz?;gg-$Dx!$7>54d0qhq*t#uoTfyT_TtWA0;B|m-o#B#aJTCGN{HMQ1!_39N1 zg#s^MzRY^P-ZPd`s;$xG(U*i%& z85!Z)+S(u0frHSucLYJ;9UVmxwzjsgv9W=np&=-x@ZiA%UkS&@$G!1LwpH50;J}Nn z>jRG-J%ZL6rBVqqGc%ALgVE!-G`uV267`t|ELcI+5_ z{P+PO1m@=E4qXQhLSM>xZcm>+MYGw&_wU~k$1&#T=P@xc;bnJqz#U1xiyj7ty7Du3 zMQ4wX7yiED1HC`<4#J@h&luz1F8`K}zYqdZ6d{Ttug0HXpc1a^b{Z?K(*y2~c@z~6 lB=KM2ufEFvE&MM?`~xOO%F&|77{&kq002ovPDHLkV1g1woa_Jq delta 1267 zcmVq=kpeacgRiNtkKJT;a)t|W-{kI zbIy65v$IG_sr^CI|0LKC-VfgY5YKg8N@>+1=bTc?7*l^MLWo*l^bNg3AcT+*!Y~Xe zB_YJN?W#Sn4P*RI@uZXpAx+aLrKV{LA#`0=i|RnS{+r@`r=BXV>$)l~EOO4vn}%UbOiZZ$feYunRuXmj zVp&#I!)@D6rBWXs9}^Q3pfJm_^7;JJ(^G$ce|vj7LWnV@2w@mTEkC{b2c1`PzP`TB z<#M4=C>#z$#SlX2bea$nkH;Z2#@L&HUV4CurDjJuopxO}7K>3zbzK)i6bgl#o15X` z;f{Zf4k!k21l)hC2QNG|d=Wyox3{OKr+&Xb7z{$*wry{1ZP~URi^UK^un7Hz6hWO; zF}?Vr8o(G!rBb@CkB^V54Y^$I^768!r6rwCtCK-7nwy(fS65-sG>QimgXhP`$6~SA z+1VKmhkc!Utp?EU?{-|rtA87ecJ8tVE+xN~vKO z@OIQR&9W@USQVZZUtHH!1tf%AU0r{L!{K;5&KP5i9UL440)c^n0mpHw94V!0nm5`% z)h*Sk#l^)yAW$e2D5cP|a5#K;cv!Vxnd`b=z*Elf@bvT)370-te(}KpSrFC%`nFI_xHtO(dU2jQA*d= z)?k7}qfy`m)WCyx4e>=4M@l&}GvoLBH#Rn4UN@q%dRA9|@FwD%-`(9!PEIy8HNC#R zB7_o&L?b$@TQ-lp;bD7wyHqN@yu6sEnM@`}M@ON0pff0Gb@{2BQWciBL{Q4GJ0x0000DNk~Le0000X0000X2nGNE09WL~Z;>G&2o($} zAyET@Ns&p{f9^>{K~z|U?N+gh!ax)pk1MwoY%FX9t3XI4l1{-NP!Y5;g+E{;wvsf# zB9Ow;DqkR2rZ!+F2>}b6kUIUl;z$lJCfU2doka!$o87nXOf@jMTk%?8uy6aX+B4xwopJkR55MD7tSf~ILW9*>BkD49E-&xv0E zpW>d+=NOGfsoL>?%dE2C`~CxgX9$7-VHoDd(=@T) z@1ZCPmdhnXQN(OEL%-io?bCJrM`XFoiZKR3e-Howf*?HD_2F=M*dxnwYHqvT=8`BS zOaPcnCh&bfdH*iVUayDUZuhiyJSgp$tJNy$%y%%xuwJhVbCf0_iXwDfPZ42^LDzNE z>-FL!d5-xLIF3W(@tBB+7K=sVo;;3OS`#Hu-L_MxNW`c}#P|S)8Vc?e0ePDM0000< L2SrXqu0mjf4Ws&n delta 551 zcmV+?0@(ed295?HiBL{Q4GJ0x0000DNk~Le0000S0000X2nGNE0Ltmh=aC^G2onqw z2H)o8M3G6?f7wYyK~zYI?N&XD>Od4d`*`KFf{lfZU=;|dMA9kv2UG;DOyM7}5nD-` z!6J~t(kj0|u$r2(X zh2ZbZ`qLBo|6l1h6|`*|hG9Sm0Zr2Y0Gg&j2m!+|e_-48Q$8}hWF`#(KoA5-k_3%L z1DDGMx~@YAfp)u%+wBI%7yy*|v|6paA`$)h5fPE=x@4LrRfTDqq_)%Pl=dU=R(P}748!5@j{C6j zix7t4otO+!6d{h|oLyQp{eB;vPNy)~N7_azcs`%gN^=|syWI|kVPLUXKvh*tr&IKL zy&R8oUixDX8=o--MNt3%ilW?&wEcd6$I*2?acA3XHo4f9iUt72<1xZ8OxM|>>2|x= zZnrsJ(#F4Gfd!5G78wUX{t7F1Ogob#M0V+@>g)M_<3Q8sDb1JCnlG#U{R(R@Bn pr%n+n=dddNjVH#B;E&)VyaL%p-Up5o0to;B002ovPDHLkV1l6R_dWms diff --git a/windows/threat-protection/windows-defender-atp/images/atp-Device-Guard-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-Device-Guard-events-icon.png index d59adf267426c89f368607935a590146424604a4..685a421cd752c18d3f78a0a8af6a569a57842b80 100644 GIT binary patch delta 542 zcmV+(0^$At1%(D7iBL{Q4GJ0x0000DNk~Le0000W0000X2nGNE0JtWpQIR1a2o(%1 z6+iaiJCRA(f6z%pK~z|U?bb1?>M$4v;MdFD#IgQ>(z;0}7o~Ak>!{$Si;D>U0HuR& zT`f8YMR9X+a_Uw^H^H@ZPtnotIn$9Nv>s1;yuE`jbjg>Hr%f7?V2mNo{E2n;{{iqf zp#5L1OCt6!@CL*V2-<|V=(>*id>(nCR;z_>xBGJde*g%AfKI0qdh*F+5?Ff*kV>UM z2nh{XE|<{&lv3!r9vVO?g(OMg0iNgKbUK9wc%BzndkP?mB4)E$Xh6H&js|!(wryj* zUc+%5EeCv@;LZ0VQsZ>y}*P*H^#^W(K zj=R+_mkTsaL$leuYyX-=z^(Y!xLU1Xnx^mIXk;>pe!mZnPx#07*qoM6N<$g1{E?>i_@% delta 536 zcmV+z0_XjO2LA;iiBL{Q4GJ0x0000DNk~Le0000U0000X2nGNE0L~m6+L0k32onqy z0*=v!+mT7vf67TjK~zYI?bb1i@-Q3*@aJCMO&sF~D5;xta#0#rwT=pIy10no2T(fb z*43heP!u;8C#P;zbQ4@l_ZA)Po|{g%_j-C4z1P8epvylAza$MIFPw8cB7YvDJ`(;L zQTs1@|9o5hd~np^I>$6kOeT|?k$Sz3R;%@O7yu}xe`q$F!su`~jI3XU1GctFSD~7>~!oaHG)>gTETrb+K41;CUW0 znG8y$5(pumPWmQzx7#5I0&KTitX3u-R-dola3G6p%`#Kq*BsnYq6Ic$g+%nzaPCK z&iTLJw{tigc)Q)^nx=8fvUo0+G&2o(%2 zBCKW>_mN50e^p6DK~z|U?U!9>Q)d{*f9IU!Buz+rp`g35=tSB~TwQBQQ$g13&N^Z7 z-V4DC5o#2tgATlNY7wM!7lIc~i=!pGYS+~D!W(ZoTD&rptb-OaD%g{xZIb5eeRh%B zO*9{Ms1x>w1LwTY^PcnL`QUkvCL+Rnmj1p0;D3m}fAwKNjE|3V^M{)x5{b74VXJ1G zn3&+|wX4MAae6-Q!R>al*=Evp9lPCL)kmw;qNAgu3=9llB`oYVJNrM|kJIU_8$v@v z5O#mOn@}iJ)wgOSlqfV!0}ZSti)1Q^!{Gn{5kb>6VEvx5-wS0kS>k`ju{taeUb58< zarp3Ie{#7TgM))umc{w==V@+k#xM+YT}LT}C_&RSbff&NlqyF-)37Xy6DLk!nr2mi zst}r{5ex3YKHP3M3kwU3jg7Hq&mIDS0I^t%NF+j6R~PN=?d8Y;rfIKP z3pF8L=-9Di1cN~g!$3rsot?E!e+B!nr69Xw8}ZD z2?1bPOI*D84PLL8yLa#6YH-o^X&WuAEyUw-rhc2^)~#ElQYjYZ7dUtB96NXJp82bOeQ0b9z7Dj-!HvKdL@}mzTy)Kg~a=bSB8d$UTd$Wx@Jd1Ljyja50}e@ z)9IwCsp%CTkH>?q>2!8>zSdq%bwNaer3larG#*?*7yPAnD!;PQ8u zdHC?*rXVU7W*{j^UAElv0>>lNGhX+S(d{ zK!DE9&f4wx8dapnx zJ4-Ygt)HS&+g!hXUA$heOifLRe~3t_R4QM^qGZx(SzTQf5s|gEHCb6%k$gTcN-0UD zQWE$gApUN@%*@Qx)uI*CAtDruMIsXs=I7@(CM1-Ho385=i$x5>K+`lzrBXSx>+9)s zn!YoA3|t$)=krw!L`4XP!@>5Cw)0@(0g>^@tB}aX!A1MWthU?jtfp7da&?_VBEitm z(3?Z_^z_i&+`KWs>Xl&_^ncq=KA*?m<>&P2(>3>0Y|%HBQi{GaedP0bE_{7~UAuO@ zdkBE1PoJWcV#kghb@{&)h|TK5`1yGk`cFXEsCgiN`}zy3{p`t1q<^RY0000A+BPzkb*a>20>DL5Ik57mW1soX*M28LV_z1%zh-<-R#%<^sq4~ z>h8p1t>7O9X6AX`nIF%`JntwG5&kDKJ~Y6~`ULYfe|>x~qobo-|K&Q#Wb(bj*lIb9 zjg4{n%4Op5I9*?N;qiFbXagFCf!%Je>8Gl-_VDm9eSLi-k_qfKJA1#{i_7J*45Ls8 z!p_fk5)OxJ`qzw%7L8I06eJcCq|zyzPA3S62+B~v+Bp@!7s_RG#Gl4Vv?V}z#kOIX zg9i_if6wRX@9!s(NO1P-SsEJ~F-;T0Fwj~fT2M-1n3Zd-H2_K}5{U%Ijvd3{aMT2; z38R!E6bex;mzkQHV$YsEcsw5F=jRz28DZD1T?B(cVzC&}Xq1kQ4q97VE0F{o4!fmV zu>|u%M~)mJ6bfOQCL+Sj%nbcM_v82b@z#48fBj>WyT9E)f<_*+Nru6Y+SQiN7YeapMN*bej3OdCr_U!}jglIePRc zf15XNt_cEwSk&a?q;wzZmS$hGwC!t?3l}a(KA&H=-??)~_V3>>P0dZx+1V+PNJO;O zRv$02mQPE{X0!6(!2<~d0@8h`TT-diYd+y{SbSgjWME+6jrLlyJe%t3>hSyhxZQ4C zE*A|A4X^olyg+hT`E=PTRJvN(-;gMmA#Ui@ueW$K{fJVj z#Q2}%guV-H7^doMx_R>^gM))yx^#(_mKG)_Cvi9&L?RI)zei|jXkgQ(O=L0|f1W*i z#=f?F96x>>o6UyL=fmxGZwRJpWKzi#vwzQ$$z}j(ZEXc0pU*QmG>Fz3huy)lUS@T5 zm0&PPdwaXJHhzPu){JSI*zI;q!(6{7A}lN{;Bk96{Ow_ehK4vDKFyXbTUc0FAeYMl zFf%j5^z`(`XsWf^)vH&<=kv+Lf5e1{h?L9a%26swHj|N+l@$>YSzTR~<>h556bhoX zmUKET!Eb^R=nTlz)Rg7cu9_whp;Rgn9g8wIH@7~Kp)y1b!=O|uVVWjNDaz$?CERQG zGnouMr+VnS(ud#guNj!CFixkFt)Fe>-q<~&qtVx4k@XFfdTEbfx7%6CZ>(S#2FYZS zfq{X457X7vMPp;*`k=Hb(=_S*v6n)jK%gVQ$&)87t*hGF?<%b|J*Rpo6bhXC{v11Y z?D%jn08gGgL2J#nZQCrbd2cZ9qL1$^=#2o(%3 zDI%}_K9Nb+f4xaWK~z|U?U${K0znwYpFOUbm9fi!#h_L(DQj1@ZZQag$s#tJf>E0Y zHW5rFlmCE|cd@(7MyJ0Qj+4WW-SPam4L-1C-jDh1`_Aml8bpLB=;OZue)I-8)f?ng zkpcM(vA=3>8uHr*Lw%aX~Qcy}^xm-dBakNz` z6_iRP003hQob%^_jK^aLA;1`eX_{!a+u)qTbzRJ6GxYm?c%BE_wx0_Ee6NMmHgL|- z>-7KtfAxAjFkTx(2!VV)e>OfG4s}!94^l3dk;!B(+S2JXQmNEyKse`DdkX-uSPZ+} zE-=U8a6lrFxb8qiL64Rk$Dv#rMv~M;WDi(_*rM#BnF&{L}Icl{U27|$w&G&tb zMk7?KRm9`*=T?M>NJ>eTWl^iuI==bOShw2^RSSnf!T&WkU5tF+N2k*{9*~R00);~1 zxP=2`Jgg$WHJMDvvMgGyR=OdNt;ijEUlq^v202w^K*G)%<0TXTz5t12-D{q03nc&m N002ovPDHLkV1mC{>0$r? delta 502 zcmVFT9iBL{Q4GJ0x0000DNk~Le0000W0000U2nGNE08I)UDUl%{2onq! z0=(zsS&>QCf2c`BK~zYI?Utdd!ay9yzdl|wD`%Gji$SeoQf60HR}6w+vWU&5VALjp zO$3w4i(yNyDj5FJ2DiPPx>e@)ZwF1}bSpp*)na}xjnGMNlI zolYcxTYBjpFbw17oKOkeBg?X2+cp?up;CJo;BYuVDFvkzHk%EE5Uy9R*HNuj0RW6K zaL%6(Fq_RFgaBg)G>w$9)%d)UsE-@O7VB0nf!*~q<@ZIa*adXZw91Z~htyar- zZ72XCe*{XU($)B6GP#E{8bGa9Lq4DP^m4fzvf1ow0XXNLy}KxxOyYPv2HxX*J|mq@ zdz(b$cZHH^np7+n$uvz*f4|>TrBWd&rKkV!hlq2IX0wU$czoqKj)UoRibkV>R4VnF z1c->Fl%(rAb-P{nNiSoA!60yLg8Wa#cO6I^K*vG9-*-8Gta@lG&2o(%7 z4fxwfvXM#Fe*qCmL_t(oh3(g|jzmBl$MK)bmeWq+0hm^!^g7B-M61?I&?xA63!$Bf zmP9Sl>Rsh7o0HtxyEQJEZ#jZbCh~{2t}A5sCK~`K#Agbzr4U=Uowc(EhjxjbIE1L{ z8n$gCNfLR8SEUeJ{}<79oqWVF44CIxE@D|08)Vv8~MaYN7ZKnOt`$A_-*r^Cv!EW~jPO6j5V xw4MJBDfK-eErr;+1Y&PaXlElXu@jd-yaPo~QKE;SIWPbK002ovPDHLkV1iEYm7o9s delta 326 zcmV-M0lEIh1g!)iiBL{Q4GJ0x0000DNk~Le0000U0000Q2nGNE0HC4lw2>ho2onq| zAR2VsLXk<o z!mo%Oeowe*nr+~&>oAVv`tUSONYnIR{*lex-Q%Jte~@L_RnB!?NGV?j+qMlt2;w+~ z<2cCk98yXch5^p`UHIwtlE2V(9lq})2m(}91*O#0Jm(xql7KPxTo?c-r3k|iZQG)* zYxI2&r4)u?fTn4S(1+lkV2u4Dp67uO0wKiW`lnnVrfEV50ZQrOn#0APYk!Y-_%q-$ YvD8tI5XK&^egFUf07*qoM6N<$f_xZ~?f?J) diff --git a/windows/threat-protection/windows-defender-atp/images/atp-Firewall-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-Firewall-events-icon.png index c38cf8c7fec057cc3c0860513c94000ca3ba1502..5a89b9c93a19dd990d2d53627baba33b793f92ec 100644 GIT binary patch delta 491 zcmV^=#2o(%8 z4la{`&yh*jf1OE0K~z|U?U%i-fR&948v&T-tTwp_j~MiI{-i! zhP_~WflQ}U*tT7X8HUk_$r9e_bQ%tXF@_)rDzWSJiZo3dxp|%gK$*`NgK3(>fD}c6 zBuUEkVzEG$WyrD&lu~G#20}>17x_g|^eNE~WImtca5%JjuIs`yO=UB>t~(saATW5sm36W1J9d7$-npU}(e15rHKnSVCUiHX|f>$?6FWTN<;7(W%?t`VfJ h5u~mWq^^$v`2)UO2pa*XJyHMw002ovPDHLkV1j>T<1+vN delta 471 zcmV;|0Vw{`1-=C#iBL{Q4GJ0x0000DNk~Le0000S0000V2nGNE0Q8xyI*}nD2onq& z8Jag@xsgfNe~C#%K~zYI?Uu2sgD@0^|6V%URmiNJrMQ+pO9#8OoqUikS{E0g4`HE` zeFMA3&e2)-+$j<)D<>CP$=lm!65|b0M;GAPh`fBnYwdd1~(0RTi%q@9QsxLU2S z+wD3r%d&bg*@Skx-NpkMV+g~r6MH-!c)eb|+^VVopv`BD!Eu~%z@}-C=XvXIHXD>> ziLxv~DTQGeAcS;uk>50pZdg5Vy$bkiVaAxG5w#F&9Ia0dR4eFG)y_85fJv4a2r N002ovPDHLkV1ibH;GF;f diff --git a/windows/threat-protection/windows-defender-atp/images/atp-Other-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-Other-events-icon.png index ea972f986825616c1d9ad8d2d7f0879fc4dfbf2d..3351ebe253ac21022faa8bf37f935491555d3add 100644 GIT binary patch delta 590 zcmV-U0^=#2o(%C zAYSmo43SCKfB#8DK~z|U?Uui);y@I}KbP%HYhiEFN=z;3d;^&mNCcliuoWZ^AXo?@ zd50j_g@9cmmPzcDq#f(C#bOqt@y^_P}I7E^pZvkn%e;8=RLXspHjYa?fRaJ$ZkH=&5 zdcCJ{%Z67qQb^M@^!t4TL4axYqeU?bsdVLh&z@^4H1!LS!9|fF~*8?WLZXxF)~e)EX%4o`Z6`rAVfrr zG4ed`&gOX@F~&q7o`QU8#8-8LRF{+_4Px6iIOlL(x2TCc&*8c*IOni!`%@r711*Xo zESF2HR;wcTbUH*e^A$O&T%*#?t*kW9WReeGBAovJ~~szJ)C c7(vSV15U}{&CHoB5&!@I07*qoM6N<$fEUjP6A delta 534 zcmV+x0_pv<2K@ygiBL{Q4GJ0x0000DNk~Le0000P0000W2nGNE0Oy?329Y5k2ontt z38?JPzmZATf5=HhK~zYI?N+g_qCgZqZ}U27E$o%nAhn_M56t`knD_;LfDIpDZ4CcF zOza4W9U4o}UNf{~eYV)Z>N1M#uFdW{37MOFhdJCcXC{1*#JlnB?F?TeP4RgXzs&(p zJIV9>y(GKc4&(6{S(g1V$;Zt(DT6G_FqupM0KH!Cf91ud(cA?P>`UDti|YKdABk`zKP48yxz7={!=)Dn>7OV`RH*F1F7FQ_H)JP%4K z1VK>lL7wLbf&fY>c%E0!qLV90l2U6aC8d<*-rSBwtqxjuDW$OA?*aU94ghq!U9?&) zj7Fox&1z96R}-XZO2=_ZDRt0Z^-YoI`BM}86_PsqJAW%*B>ySN YcazANn1(3f7ytkO07*qoM6N<$g6dT9iU0rr diff --git a/windows/threat-protection/windows-defender-atp/images/atp-Smart-Screen-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-Smart-Screen-events-icon.png index 07483b5a90532a699e62dff51af08b7a7f01fac0..a4c8838297a3126c8262c4816395e6bba66113fd 100644 GIT binary patch delta 551 zcmV+?0@(fT1&#(GiBL{Q4GJ0x0000DNk~Le0000W0000X2nGNE0JtWpQIR1a2o((j zIB@LWRgp>8f7wYyK~z|U?Uui;qCgnMkDKk3k_1~dzJRgQp|Vgq3g<1Pv+@B=Ol!nD2gbrT-PNb1aZ#EG|jJ*_EUauCQ-ENl$Xti3n-|wZvZ?{{fCl#RI@5A?fc%D}{{BpSf02pKC0c2Um zU@*YxbSezsI1YxxVYV@?4-gRvA*k2uk?Xp-`+yLFR8@U-&r@C|01?r0xg^ecu4WWP z5owx6>-GATr8oc)5$Bu?!^jNhoYP{lNVAm#arl`0)k?UonOsz4Nm|Gn8xrzF8vjW1yAbf_$pj>35h>8yMJ6H9uD zlqPmsD1{lHz;=)x0;LadZslgZh_IWuiMjiibLRXXoH^&b5fPrLKTmc43BWsmr`G88 zOY|deP$<`RvD@tsh9Ll;*=)kHER05@!rV8?8H6-Ve{nb*;CUXZ)haB@g0AZTfH;of zc^+!D8v6bIL(mOiwOYaVeMC`&IF28FX_}_kY&KZ0*B^HoV_6`5lH)iegdiy;B}qbM zrIaEmB?%$Oah#i2=8+j=;G9F#w8Hvc)oQiCIR|4b6MMZjtyC({1vDCsd_cWk$K`VQ zw)y#df6koU06Lux!Z1V-1Yb5k9*+P3&UrpS(=>FuUF`S!F9UqvN3Yk*2LA17DJ8Yr zZBj~=o&zZ*8HRB;Cj%fNn$2b;geWy^Ns^FhnzUFf?#Ax|h=_y`WZQP3xe$V;(`oLV zT);Is?@yFch2{?dSBP!fWSS;PDL>A)+btP}QBi14M3lR(Kg)GpESF0R1_MM3`+yPtJmA6zkvS`@E6gqf2wYsb{hZy002ov JPDHLkV1hVr0QS-!6BnM)MCyYr|;^an7xV<_O$`#vpVGg4S#f z=Z2c}4}@D=lh6-HU332Kl5)FbdM&BJXAzFyk%!}VUXK+b!l&?ky}sM10svocmbjsm zNurcV;-h4~(@SpIY&O_#w>X_n002P{(C_y#7!014f2mwUFEwX^Ai#7w1pxGVJ;<^Q z0I+QvyWI`|FrUxCaa=Bsf5|Ks3tTQ2%x1H@_jO%ItyaTiGRZ9iA_Ar0x-LnQM85Bn zWm&`+Bg?XGYJA@(Ns`EQ-L%Ku14NXqfgQ(zD2fkX0mpF=MG=nUpagxqtPfirhL`389nAYocCYhIi zwN2ARyWNg^NDzd~+4E8vRaJ2~955UXbImX8JQJ;uX_}em{ChVQMER@okWwazQYMM$ eq*r;X#g!jdIRJIS8o0Os0000opFC0{}o#6m+{?^m@Ig0ZNbTfjEva9*+S4f1OSTx~>BNIOo`GHUNO>bP7q5 zUIQ?j&2T!MFquqlKDTWfl}ZJp(I_(jNT47HNYgZmqKG`tBgPncp7+fYMG zmUcE4f;W(q9>6JfW?6UH9d#!-uz5`&Jl^~A^S?*DWm#}$yq((J0lWgh<#wLsMDKJ3 z9KhvKf>H`v>%$F%5Rg(H2iQ{Nr%*~g%-IB>wLYwZe-PsD05%nPeG`6-s;bcUJ$&B> zV+>&!0szKwL|K+7ioza%F$QhhuA1CsmQrG#XBcBZ2(be&35JC{gG4ebIr4)>@Z_^P30lKb3k|fUu0N!8u zo5Wd`HNhCOxt^6Ve7Xs3ZbI+&D|R0e2jBo4!2bofuVU{kfGa%!Tovu&#!CPI002ov JPDHLkV1heNl8OKT delta 350 zcmV-k0ipiW1jYm*iBL{Q4GJ0x0000DNk~Le0000U0000U2nGNE06Q?QqLCpW2onwk zF7;0=2a!qFe-TMUK~zYI?Upf$gfJL|-wfMXhg?7e3mZ!hkRznd0n%Gpd4(Jx;2mr% zEbVM81aBZIJ%CdTyR5scla&k^7+)F5`*{EVC-JhbD}3nch3XUh0l-VG->=kOd;F)A zQqWo-HWxxbO8I~Aqs@C#O6`7s2-aF3PA!Bu4t`eRf7cwYpQ`H`!!RHS0x-r9MG*jC znkH0Lg|aN&gN-rhx^83sSxzY>mSur4280l|;Bg#5Dc!7n?|qhKXxkQ?b1OgV9>;Nv zd7d|GN~y2ZoO3iyV{2!hm=J;_Nl+98D5YSG{hIbL4AJ*J(lm7k2JWf$N}1<5j4@VT w&X1F`DB*h6&2?El{dB$GdwhaV@CkON8+-Iz3R*rxQUCw|07*qoM6N<$f()#W9RL6T diff --git a/windows/threat-protection/windows-defender-atp/images/atp-file-creation-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-file-creation-icon.png index 411303a0c0209b62ba0f20871968dae0559eedae..ea1d20b52168e2bf9ef3173211783161233a48d9 100644 GIT binary patch delta 280 zcmV+z0q6ey1C|7k7YZQ=1^@s6SLDKPks%-m6$~&n`}C~ukxAEo;Ymb6R9J=WmN5>4 zFbqY1Do(;hnAtf%*mDG!I6{1YT$0&cYD87knkZ^K95^mPNbO88CC1c1+U*09e;G zYkjdyNIP;w)S38qMoQ@|FMZ!*p6CBbgb)xyIL1VTecx~GVd9833BiO!k<)SJ98xXC zD?vmcqPh|}I96V_zx}|x_W(R7i>Kmaz?k zFc3vQQ6^y#YI+Y~_csDmjNluN^gDX`yL@*gx^UJ5s2uyW@hA^56xC_MVo|Dg~X}1W6ipx-?;1~m>JAmR>DGO z{n6d~fO+o$;A7u=zZ;KP;wT!$k#78F99K}qNi+$i3W*0g!L+acu^}}80000Kmc0$b zAP`1BN1230sNH)2(=!58i~s|$r0XwD&Qel1hh)Vr?sbSe^rZU{6G`GaCIEO`D6nG^ zf=LLska%hXTWjdOAI8k{j8e+D1(noVS!+GK_uez5q#2o(%9 zE)3?8Mv+O^f67TjK~z|U?UtdAt3VWn|L!75T}1_=X}}`t!8SoRm|7m8zOEs)7*bbL zF`5Tp5H%obhX-f_q5@3SSp}O-nuU8|)7^wG!OUUKd^vM6Gb19xtC0Y_+~V!k0>B{g z$skcNNL2hS3C=lO*98E$t_#k2ZxT}5AIq`?V+@Qje*nO2HtS6S)IgFXWZO1bmPKJ0 z5)n}thGbb5*|tqdk~F1gq_Gl;qCizu$g&K>FaQ9CVc>i|qby4(iqg3djXg1$OghDT zk>H#oO;bcsR5v5%98nY@O;d2rA%uYAIQ1OIaUg_fZ_#$&f*_#9Vo`rV5Y(|O%g8j% zI%b+Ce`Q(Lx+mVZ+wHcE?DcxZcs$1Oc*OmF$9z7=nO{zF-NDKsL1mi ztJSJrP?lvd##)~tz1^a!sv?eK#BmH&RsU&jFO}%Z-+E8{B!fi7AW`uvBqRW%S4;eg aN_+tLj(#!qbi&R60000Rf51sZK~z|U?UtdAgFq05|GTRsbrlterUAR69&8hIgQ?{a>gyU(iy?J2 z6{~pw7EuGDc6op{AS%FA&8d>Rq@<8?xx0if!R)ZJUuGw}`$j~BKf?QO3w))QsiT*v zqnD}U|H=p<;JPjVz;#^+Av%>AwE4L#OK{G?IR^ktedx>0ES`Ucs!ykOQ@>aNnslG%xE-vDc-4! z5CUnMB8sA_X@wAoq6lf4LI?pVB^<}8<~WW6DP=pGHhUTb0nKK!>I;IPie*_wrfF6& z(=;i|f3j9R^RZs9*GKF4OW!E(6-5yAI; zTrL+31_O-8G&2o(%B z3w6{dgON$se{)GhK~z|U?UpfagD@CIA5}JIjg%djBSl%^07>R>0gl0p#8Jorva<&y zCPV}mU=Fi8MD|dn!fk2O!EZzQBtL$Cw(LkLC9lPKd$9ljRzhJV6jnlEB^1UIRaH?{ z)$CaSqyfV)$iv|v+qN}{>-;bbCUG-~BuQkR=X!y%e=MKo%Cgi8=XoxZB$-D-{gon) zV_6i%(`-=`GLB>YZ8(kTPBcwJ5CnR!g%E^c2tbx)>~=e{ECV16Lxd2z4?z&nG|gls zCMEj5M+gBx*L8TF2f*cW0pNPQ0&qT`0q{JJx~>5bLeTg9&n5nXNeS0=8OITL{AJg5 z0POdBe*lihBLJt<33yCvv)KSJjw7z?PFtANH;STf6*G#Wd5Q_(`@Y`uG)-A9mrrx+ z^_nzIfk#Jt-)FU2%`*vgOh3CHKGL@Bmo6(uO0$QqI(FObb~1ar-MHWHMp?iymiR^N rYg=O_6jnlEB@_$5d9}p9n8Z5;B*8WWT}g=m3jhEBNkvXXu0mjfFul23 delta 455 zcmV;&0XY7s1+E1liBL{Q4GJ0x0000DNk~Le0000b0000Y2nGNE0N9%lyOALv2oeq% zJH}b^)R9Toe|bqnK~z|U?U%8Rf2(q- zf`K1^R_fWpK;>pC%RaF_~+qTu7Vcb-n=frW$d_Je^f4U!AkW$ih9ggD=$1!=Hzox0- ztp}1MQAJVQ%@#$Wk|Y_QP1-VQsw_)_AQ+nvLJ)=_09lr?TCK>k41h2U5kibj20=hs zmRfU+q?)Ed2mwG{*La=>z~OKJ;CMU&u;1?i@H~(6`3!&%f~IMnFZC{rq+Hjf?|b0Z zLS5GYf2`MQ0JhsL0K44|xV5=hECA^H9@lmC2AM3nQc6Wp^w6S5QS_Qc2k?D=+?g~@ znNFv7bFY%jNRd?B#OddcA68 x2Og4oHUIx4ybCL(i)8GIA diff --git a/windows/threat-protection/windows-defender-atp/images/atp-powershell-command-run-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-powershell-command-run-icon.png index 31840dffeaeedd9d1d620da5ccb4d6358a0010eb..345865afd3c5491f1292f7a0b3d9c63f00b8e500 100644 GIT binary patch delta 305 zcmZ3$GK)pAGr-TCmrII^fq{Y7)59eQNGpOc2OE$Ke{v{)qM`zaD37J`y+@0_PxQQA z|J2jPF(jh(?X~^9EeayXKh78Tjuzio!Xm!m=(RmvhB|BRG593TIWWmp=FsXLGpvOL z{}&wn9VX^tr=+NIdXqxg%U70dYK#rxEuHm3E#3lpjywJ_O?=0jkS3Abq#oea*l|v= zCVq>kadq!!C!kQcvt}vpqjys+_86|+I^+4zYJ(R+M@)P(X0ctnRl%X;bbH%{sA~Q1 zadFj;cCT7BAysnAHTfHlI}#->l*WE&v+Yet>v`O6FePftb=uoxcr# zD81v_uhli@$;oXxs?pa)rRSOXDeTtQv##h-kC1PluXPgg&ebxuqP FO#qE$coF~r diff --git a/windows/threat-protection/windows-defender-atp/images/atp-process-event-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-process-event-icon.png index c48ea6e880e4361051508d1c45c7f66edaf9ed85..a91aa7ed3e60d56a0aebd1dd9e42c3498e561942 100644 GIT binary patch delta 666 zcmV;L0%iUG27m`4iBL{Q4GJ0x0000DNk~Le0000W0000X2nGNE0JtWpQIR1a2o(%E z97Czx36V+He@jV3K~z|U?Uu1?B0(6%f4QWvNf|JZCScOogqS9z(blat0ZC&JGnT=> zKoQae+wER`*-x=5$*cte~229f=l}gcQGyrHc8l+MwOw;^&e*@ug7~8hdb)9@Z4?sSjN7r?1 z+a??id(u1bYT)ebjCefG`T046!GNo)D-wwW(P)%FAi#J$_N2GB$y@OD_C}}E;o{TY=viG%8ifBk-J+jcd8xL`7wh^A>P>+N=1(&@B>LLo_~)6#CYS2&uc$z(EFtM6Kb-EJ3v zYPGspa~y|kHp}hpEv;6IhldBU*({FZEI9LynD77R1m-CyrKC_Oh=@q3RFapMmnDv2 z7*Z;gL`0-eD2P%@dcB^j_C{^^{{HUD`S|$Qe?-cA0`+=bG))uBvX&CjG)?OD`V!~! zeOs2b#Q7VxUW6OXflMX?z<4}nHk)A>21iFnD?G<>czSx`@bD17-w(j^^YdEm{ah}W zb2D&qa)O9(cX!8hI%PVY5)1}cc$Q`1^Z9sud_+XJxw+x^_;|gz+ZFtd&(&=hhJ-?) zWJO2xdOcA}dD8Rz7K}zCip3(=*Voi)HCn9}_xJZyt5urKCZo~Fo1oVOM1IWyrPNXv zD5Vy2zza4i!mq^l{1NR8{8t7JfW2)R*m?p#0bsRYu^%KWiU0rr07*qoM6N<$f-8o7I(=>>ph(@CU0BAHC z5JeH1rXd=Qa(jNiCy>YEK_-)d*XzZ4y+$Y$LN1p>JRXPJ?Z$4mvean{1C1$f3 z{C+>W-7Z`%7gDLzjZRS%Y&IK+qKMgS2DjUdKp@dk#KC^QCqWQy)~C}cl}aTF27^>8m1sJh-e?3tp#6Stx(8QN z&*yUhK(E)ktm(RrN~MBCB7wfaWe>JDmiP!cQJk=Qvha?CBsj7NaF+mV$ zI2>MS-u8>Cs#lsn@o-JeeGiq(WdOi#w}W9AkYyP*o9#xY>pF_XBCJ*`>~=cpLZJX6LL?G_!{IRBfal2G^LBb< zV_BwPFnF1`#bQB>F>cSh-m>j>i&m?Ja5#*9zmLgef^<5KUayDoc#Q3K%Wry5g@}IM zLyWPjDPxRX?jc^doBD6__5K(?n`a<19xl)i=PAHSetCz?00000NkvXXu0mjfOTaH& diff --git a/windows/threat-protection/windows-defender-atp/images/atp-process-tree.png b/windows/threat-protection/windows-defender-atp/images/atp-process-tree.png index f76a65a2f1c1643977f3ef146797c412b3d5f4f5..cf59977c6acb0a370d246784b73c8b6024dc8bbd 100644 GIT binary patch delta 451 zcmV;!0X+Vb1*!!hiBL{Q4GJ0x0000DNk~Le0000X0000W2nGNE0GzlH%8?-;2o(%F zCY-)B`jJW3e|1SjK~z|U?Ut>M!ax*8PdDobauQwuQH20B3c-&@;lN;UDBuCGeE>8D z2h|0MXiy{I38s<+ha8W`LL}n0Xe7Jcj>qGHf9twvty!S zqOhD8e~m^|t5tfv9-GaE#bWXDf-S5QN-4VCF6Z-^?RJ}L$5;}5s7d^lPp4A=eBXbn z*J?Fpvl;z<|K;yPj!sl66) zbV{{arPJxK*=(MYe%cILE|(mSM?B9%Yt3vnqgJb-f0TNk^l&)P>-A7dp_HOjDxtMb zEwu`7xm;$oS`o)F+wGPx3~?L>NEvz&Ieo5TjFHJ?B9%%-+U>Ti*Xy5muItKZG!kQs z_`WaodR>e$x26)g5Z;u2)9?4i_x-zl*T!68^-XO;?>G)x>$A|`;^{o?cDob`1)9w! z^ZA_db$I;nfIYoar4)@ugWYb&VzIC~(K$)*Ya0v(00cpB)?X|Z84icES}m)ECf;d2 zpU3mO)HwTE;beEUKvb7qLg_RfA{8)Ni*pqz5pc{ VvNsci{8In`002ovPDHLkV1n$ox~2dC diff --git a/windows/threat-protection/windows-defender-atp/images/atp-registry-event-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-registry-event-icon.png index 12f8d99c9b4502c7d757f894b451351c6683d409..e0da4d10100f6b3dc850998855af21102238dfc6 100644 GIT binary patch delta 302 zcmV+}0nz@c1eXLMiBL{Q4GJ0x0000DNk~Le0000W0000X2nGNE0JtWpQIR1a2o((g z40?5VBaunhf8t3*K~z|U?UcO{gD?z*AGwq)!vrkBQELE3uquyW58#?*n1h~Psgfg! z0TbYSm(%Mk+0y6JPaz@zAjqU!uEYwU019vk05gM`^8m~f?|~>%Hlg<(A%v)ph%k;L z0Ki)N2Jk$uN<<(Va?Xi!E^4pqT8uGYK4VPO{;9(ycqq#<`crEyhG9V8_p9#@15DEt ztvNHJsw%W?do4iIG_Qp7voH7OT=G)bPIAIEwL`3MiZu8##NI>sB04&;5^k1u3 z0e(?(6NV5LCn07hqNKPdoJqX@+)LNRX7>C!9* T5=QO-3jhEBNkvXXu0mjfWEh3{ diff --git a/windows/threat-protection/windows-defender-atp/images/atp-respond-action-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-respond-action-icon.png index 0ceed7cfc664fc29230c8a7de73e1635e4ead6d5..0a6b3da6d4cb4a60cfb28d3d6fa877cd957b66ee 100644 GIT binary patch delta 691 zcmV;k0!;m=2bl*UiBL{Q4GJ0x0000DNk~Le0000W0000W2nGNE0CReJ^pPPT2o((h zC(qKbB9Tege`HBSK~z|U?U%nxTTv9pKli1|OAtki4OjwqlsCwSzO%g;#enf zs8py_@V%6%O}r^P6VwrQy-?7nVD%006?Lb{Wwb|lR;};wb$0xhVT1aIcaUIQfRH2 zo}NY;7;QrUQ9|N%f$z-g zZ8Z!Je}aJEjvfj%1?}zalu9LB&t-diJ4}ijHT(qiBqBtkQEb~Lzm&%q!}$1kD1cBm zARypW2SXy3UV`JksR;d~fX&OM6|IEMEy2cBxf7R91#ln{bhK7d7ea*49wssS9S-Na! zT6LT7+QstuJgcj#1QKA3!EqekjgAtrBG|Ug{`Y-WmRA5c{dLO4#RXo@BNB2oetg zEXGrXeUVAme{)GhK~z|U?U=ty8&MpW~lI^1b_h?{n|& zec$7hhzL&ubwA+z4~u$f%QZ_|u36f0&C-@@mM1Ouf2`gME0qez$H$0-E!{8-g?Kzp zJRY|vcY1ot)cYy4)+lv%859InyEN7yB519d`7p!W+?+i*0EJ@y<2;#62Cem-a~&NW z1VO+<`v|2JT5D!!XA$b#YcwP$N=Up;kVqu%#E*`SI6FHdo6SC+FG6>B_k#~`pT;JH zKu`^8f5MlSm-soKot>RW)59<%Y~Y)2`XcX6V zDXbJQ#xOZK*>YVgBPSw6-6#v67D$bz@N+)f+uJSIwbq1iAgOdpyjPw~OiakhkCSG~ zaR0D2TXjW~e3PVDEHdN`S*dA7u3D`!JUmRXSj6)@8zliyQtvAK2&Ga9r4$1L11-7K p1Z>DzqW!PL8g02|Y0EXsZ*1yw@FlBR4e9^@002ovPDHLkV1kG!Ltg*@ diff --git a/windows/threat-protection/windows-defender-atp/images/atp-signer-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-signer-icon.png index 44f431e3f7175e029218e1b314c2ee16455f5a83..44d3dd052c4cb434681d9148ad0b562588559565 100644 GIT binary patch delta 434 zcmV;j0Zsn-1eygQiBL{Q4GJ0x0000DNk~Le0000X0000W2nGNE0GzlH%8?-;2o((i zH~C2Og^@|ue`QHTK~z|U?UtdEfaxU%)^#*%+{D-%%n~hDT6}%?b}d<}qMs zCL`5m*1T6-=eU`J<%WX`d^sZn&K4_G% zEQ>tPeBXJHWf^&%V_8;b5{+MnX_~CpYr-((@pv$uP7y+2nr43z3LylG#e(bg+F9_{ z5?`yK=Xsq<7_V--w$V+~6oBn^`@X;5@3p^o&+{r(^r!gR5`W0pZC4m26r+Sf6)R&% ciGQ&ZpCQrTFpa&7&;S4c07*qoM6N<$g09=grT_o{ delta 401 zcmV;C0dD@91^EOaiBL{Q4GJ0x0000DNk~Le0000U0000T2nGNE0KKH#43Qxq2onq` z0{tTYB#}wie?&<{K~zYI?bff3gD@Ni@b4}sv3r3DBnn4h7JLJh%n}}9!{D&+0M$GO z1cyS_;?SUbYRi#a=yuTTlH;o&w0uZ^{lh^BA@GKLyaV0g{{er>8WcqV#@J#T&-0L` z>1(o(B+qk^=lSCE^Z6{U*Q@MRvurZdgb)D0?RI;*f6rz$z7O@YxU|O4gfTXo2dC2s zm&-*h9LF)@IDXt0MS*FWr2V9D5Ck|LkL$kfhe&JO_dO`3FijJbQdCu?9_E}QNfJa+ zgtl!FMG>+r1Ls^V+%yer+lJ#f0075vVB0pDrcn#4%pz=A7V5fw)U~QA)O8KZvR1>3 zvs%}6Tez-^BuOxiBQ#9|Aq2XvtA+0&gupNibX~U^d&deG3B8hk4*G~&nyp723hS-m+ z)!S6$BU0yWM4C2hD|WjbHk%EKq5uFGhJo2^hVgjZe<|Nr!-4j&YYvA4@;t|WzsLD} zzIkya*6Z~!8jWDvHZ03}t;l-4#`pI(hQlEY!+`6$m`|SK^Z6W$ z#o~1$09qyNIhi3VLKuesU!*FxQtBe~?9yG+s(lB80n#+R zi~GKhf5~J50N8G~cjHA-z;)eLBCRT7+cxq%zl$rS;5ZH($GKUiiagI@+xF{3EX#sv znuwz46017G_kH-je-i`#wy|lN?avaD^{bI2NhpNi>2xB=%l(?`F(Cw#BzctXj@BY1 zskNq*vQgq%MoLMob!&;IMM%=~yoWNCgy(rrYDshwA;};JD5YeUWtUi%Wt37f2!f|2 zI*X8G9LE$wP-{)CHH8q2#2onr1 z7*-mg*pW%sf6qxoK~z|U?bbc6vOpLG;B&v+)>7jFfErqwscek3(-{}w4rD4~LO(9R z*g-8eRy1@Z)P@BZDP6$1#TSgfxk${_!jlj(FJX8xKfo7BygL704FKK*@qN*L$=tlf zNPG}g-U4yCFl%MKUSqjjq9_UgfMFOIjYjDA`;8D^e-|&SySrn%-6GF(Y&IJl4u`Xc zR;X61gUT?~iAo1H~bgfvZ26a{v>9meA^CX>l? z5CCd**7Uwc3$rZCTD7`qgb2eBN~vR8DTOc${}xdVu~O=Yd33r?^XnGvbUH}W^s4Ur zJ_dsUe*j>$T3uZ)iUO|d)%5-}ldI!2hjknr8iX11XG2)qdi$ALmqRIzR f<%6j5K~(tx%zNNNIt1;(00000NkvXXu0mjf)&KIx diff --git a/windows/threat-protection/windows-defender-atp/images/atp-windows-defender-av-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-windows-defender-av-events-icon.png index 2c6cdcbf6eb15ba8626715c7b7d0ec160aa41101..c6d0cbc6e45cf3662fd1788fe23debe595ecf220 100644 GIT binary patch delta 451 zcmV;!0X+Vd1*!!hiBL{Q4GJ0x0000DNk~Le0000W0000W2nGNE0CReJ^pPPT2o((l z7ma5{ijhgze|1SjK~z|U?Uy}n!axv4A5l7%a!-Ioi-bf6CB@QFK*wM01JJ_-kbD3T zC0B5PE4M3JL=VD;AQeue*vmQ=aTNKhteMq*&*Pc3wsODUDN=8Rx&!YCvEL|3 z1xkPtAZZGoYO~o8h9S*n6M*CKNUzspG#b4QAc`Ume}@CR-Hz+^3J?Qmtp41n!+`z_}<4z*e>tupaBV64FHc0+4ze1kNd z&u8GXN@*&*3I9JpwOTC}pkA*V^TsK7q3ot0iXxO!sd>{F0tg`pg1|^(`~*@;I-QPj z1CzSlf9}&YPkUf8nf%CH2*G$f&JWOPwHOYEnE|HLDUC)WKLEgDvA}U0YjdR(^ZDFr zt@Rjso@WK2lw!47*=}nOAf?3fJY!R4HO~a_fLO2BxUP#3B903oST2{D%^}A@bUK~l tKVG}tMoO89Z-H~>FUxYp}uX{o?!wfbD3 z<2W}qW0saBW0t0Aic-qBF|RBDgb>7Wd}B9;R7y#^-8KUMlIMAM?YVC_8jT);2_YB` zhsA--cV?4*zh4+Q9*?Ql>&1Zp^Z6Xtb**7aDW=n@ao(ydeBZZ%Dy3L1m$_@KfKp0) z-_K1V8<;il8@gJpn9XJgAu_uVg2iHC1%n3*f4|>n9ii1~A*Hmv_w#?6*XkB;;8XMk Xh>da?x-5xS00000NkvXXu0mjf(b=@g diff --git a/windows/threat-protection/windows-defender-atp/images/detection-icon.png b/windows/threat-protection/windows-defender-atp/images/detection-icon.png index 12d2217cdf732acba7e89aa067497e19bb634227..bc768a2a860f41e900abfbabdd701eaa57869092 100644 GIT binary patch literal 2827 zcmV+m3-t7fP)fFDZ*Bk+2_Yi@000VfMObu0Z*X~XX=iA30IUzpIsgCw4s=CWbVG7w zVRUJ4ZXk4NZDjy8_YVmG000SeMObuGZ)S9NVRB^vU2y+80000BbVXQnL}_zlY+-3_ zWpV(wz_gD5000PdMObuKVRCM1Zf5|%8|H@q000McMObuGZ*_8GWdQa6gX;hQ00?wN zSad^gZEa<4bO83umcIZ100wkLSaeirbZlh+sP57y000TrNkl5+(y2<{U&j|D4>sJunPgU^iK0SONl) zQB@U5k^t7f4`zlL6up2?JrbA+ED}SB6li2ELRH~#fI}pp+P0a)7CJv4!@^9=f2=;9 zq9`#l(lkK==Rg8QkU?37^G-BU10q$3IOi~d%!nbW?K;)>ahS2lmE=MRB4!Jt2Jij( z=wl2>ju3>I5u?#)%x43N(7{ZY^AuG{mZU@?vWWCf@n4b&xHuajh#2d1*B`BL9-L*E z8JH1c{d|ZeX=;F|s(>XPQ|#A00XeWb$a#0{ot>y15uttwM~o3OAp*`BA(X^u{p=Xd z67r&?)of9!>>Kw)gi-ac)4I5(OB(Y3ccO2s*Xxlr5<(~t0q>2fieyQX5CbuSPa1V^ zcu$NFV%@;b*8vc%U+{=?;P9CFMNahbNdG4QLW=ZyJ+Mew7IpWl$NmHR_|ljDhBpok zF*SLLC!TzqFMjc_dEtc@$n$~&2cF~p`~Q%WrzeT#P#>-r;0{;>g+)#z7Z=D>XT({o zSt8AdR5(j%H8P%k`oDO7{{fDl9OwAhNxHK=mM>q$FYmmL$>}++|G+M?MuNq%&V)&d6~>c;DL>W({h>+str)KO4Toz*k@zN5Q8d5`|}yN~N!*;S{?B?ZMQ zD8{Jy;{as+`T;~i41^*lNgYL15zHe?a4zM{sR@YUQ}=$FbysX8NfLJ5_yIn8$8L_j zIl|PrGZe8$R7tlpM^TlOL1am@-|UwrBAKs&5H?>o33GwaYZJQ#q1z>OEhOV?yUU8T z@1oIYFm?J2lkFK=Sw`Au5Da3Bc;`{&5Gh4zBuRrRh*YkIbCN8g{iJTlg}m+nPpj47 zs`qYYWZw@tGW5Uv+~6`2MB}p696C0}m%sc~y4^0*<8O22=8c@5oMLdzYMPCdnd!5% zCntF6ZorkO%n(rg;$E)?N>V-_k^C|6WZ3YApmQhq|J-qz8BKhR(OCfrgPkmpL`J6hTqoUVVsJc2cHLic!^Htrr>smDjoZkPdyY%&MJ*LCw+By@Zxm*gx z0uU@XNKzGhs?aF6cU0=WrI&v2gg*G8+jRHu-lrcOJfhhsbycbty9%LH zS@u+vZS{I*_4E^u>DF7W*C&7fGkR_OgicDDkW@se=t-SUz6cqT?L)Esu8z&V#37{n|lhXJ&ZnzxOkK zW`Y<3t5&X}nY3^YvMd2((MWgmTops#s8w`&U4HudLB96TLp=P*qddFs0Gl_xhxcsz z1saJ*u|NuV^B5jsgjmn|){-V4y!j>umk;pxV~?`u!N2FxhaY0>6LiC!gf#u`zc1(zO(7uw~m;(liB$hEItqF^o8`Gpx>`H8TbWSF-u% z*Wrk4yK)0BKDVDWgPXYX&bzp5z>)M}yeJdMuqa$#0i8H;f{`O*?7Z$KuD{_1(uOC^ zBCV#!q7i~4wFZWf)Ds-xC{_PY8!0OXGFC5J!msVRnH5Wy@%r#E6Vo#o5L7K9D+drm zO<4Gd6quZtpxe$_vt}*$gn&ph!&@K($UH>FzRUuJI=RkLN<}I~$~?zHWN^hQ29_*i z>fBj6d6z&fmM(F^C5BuH)Dv?_qlw3`3esc=&Qc^1Rgomn$-_lbaN&u4t=Xh3L=ilV z)^f^TkE++jbIB0xGlqmzH&>E0*t&HKfAQyk#Ol>+dGWdDnVZc~=_m_93eBePqoZyy z=M0l067UG;pbU|`gvP*X?*8~Es1Wboya5*>^T{G*<)9WKBE>NPN?E^tJ=bjCz}(DR z{O8{9aeQ=~>2n3%EujpNcHW^Eazd<74Cf7bMG^vKx5MelX?{92z_lSylX-<+H+?aK5~%DH*Vlp zZoP%!;bDIE+7K}ZkE5BiP?bPcLdbEh#A3miB`Wd{d*uDEVa6aS6(c|@qjFH59 zF4i`+p1=`-*q39-@UB6OFtGG8?!4UVMcQ{rc_Pc+(Ad1CJp=Gi#z)U9!}<3qP)w@)*#-y8*Ut*+F|QC(APa^v^yI zn&nTv@L9h7_#>P;eVh}g-e$JjW~wvC(BU`v$~XR*e|T^YH{WtQzq$LP96EfEvYchZ zhIe5=6(W`<#HfoTrKA!tgcn$4Uvdd-p!U zrp;SfwPrPIRt++FcAB9>hanoD`_#Sc{>bf&ogCpSU;iepRa^M%?|q()YnMY+&`h&h zrMruqsQF8EJ|dtb+I%G`5r@vp{ba!^Xp&S5{ZQ`)ay1K<6_z#V z_A1h5f>9ymgfb^}M)ZcWj9%p^qLE}RDuFKo1DPj;Im|iokm8b*rqv3r3<2jHiMhp2 zRQ>U71Uy!6V8J8vsJ{f83&c>6_ykosmKY%zkp^-JRX?&OeI5uo_!K!$o(CG45kpCo zNVDdpWCc}!@rlI#28Q>jUOD^QxRLl4Dur1Cl;B+o(P|DL;#AhgV*tyb60w3-!()OZ zNyxH{vd9;q!z3wE5C}NxIcDZT9&pI!AGDgp&a++BFKU7ePx#1ZP1_K>z@;j|==^1poj532;bRa{vG#)c^n?)d2*Yw4DF|3{pu%K~zXfbyspAzH{=Vt5<*F$oCX|_#FGZ1@6!>04Bn;m9XBEIna+D6A-hKn8yXcBy$fkAC|xByySkx; z-oZb8+zjQ%6L`bBt4wgfSJ0*RUd))De)N?Kem)e%@&ev~G;Gi|KtXBC@m}Id;s#B@0bL3ATmr$0kg=cl{e%geM&(mMt#$OJNa7LcBd6mX%hw zCC#UwD|=?+2GeY_JQft&YzA!#G6^Z+JCINVB-hWR2A#lBxQMk2v?Q%aeh>dZL5od$ z(9a|4N{|y=dL}fs1~5ENIIdw>rVI7h?7W9Fo;jza*A9DPtXGNEVRdhkd(uByd!MbL-*q z114>e=Y(=(erR0GP|CC-O{cP_7ir6bCTa2IiQ|sjHe$@3Kt5Mn2W5E=Tzr!yBAPHT ztH5&NKfRE9;TZ`FxXRJm^Ip>L0T2#>&H}vY4}uKKU-&@-eeZQ90HT`u${eu(Fa-IO zJO-X{NZ_Mn=rCqLPfLX?kWvcaxfG$Wj3Io>^KDlOtRQ9>kW)xcdcrZ=HjzBGXj}8t zing};HBYVXHq3cNC5G?W(sQN75fT6}>4&5eMtAFlP~jX~`CI?}{HK*iFV>y^*UQfx zuR3En9TP*LnDkxO)_Mbwhop~Grh>cuPGwygGk$Dkb*-fY!pRlJp%30HTwK(OaPyUE z+8Paz1{|DF!uCX0ZYcNNU9Y^nWlP)*Ob$tu-|;i3gdx}vZ(w^LZF`nxt2mB zOy&?QP6)y$YCz)(mP!$zX=*5C1jrB6G24=`Ad$4RQ1@A(MVZR*SBpaA-q_5 z#h#iAr*^-$QQJ#+N<(;F(MH(rq97`vKoxuKn=9 z{@mOtrt&^6-?MYyd!_{AfFW6uZEYzhvV7?Sl{M#42{ZmQq_(v=e5L-6LvD{NXYc!O z?s$K{MIAiJ4fa8?B}2Q$WM*jjad1_qf3`A8aiso>a~wgoR;4Zb4>%* z*Y@M)2cdm%lcr}i96$0wXi-U={A~$=At92TIjpLsxdT>(YDpJReTF?Cq+zxeFPVMQ z&#$Zb!APJQ!EF?iu`?$Q-tg;wkG-(gAZ2>c*gn!YakBjJCm+ksysOD1B%L<4A8Tnm zJ$-6c-pstJrUP`ceUWgCq#@xqj1?S*%CTPERQ6GM#pJx{TerW~ z)DmuKz5K+JWiLFv^6|B+%1_rqLJl~MM)L!h`)CfaNb9-k8ljA%Uwl|lm^b(D51gs1 zM}_|G{MYEajwf|@Bs8Q6i%6xKEQ(iY`XVM}0^X$V3w=CkTIeix5{r8S2my^e%o7Rz zlMYgFYC>@os#JdsY(g=KJ&-|;!sxv4!db#cDMz_F_hcIh$&SZSUR31pigO$yWN{8! zvNkYNhyfb5xK!%YheY5BpuZFk#2I9IN+qW$0ZEwp`agiA=-Jg{0RSSfBYFU@GD1^CHDz#1hr>jgwsFYXhlvAC6x=kWmw zGe7==7{`HtS_;6g$39qrDzubsySV0%BN&SwI8`iL+K#{`9E`gSGKaa^m~v@0b0ww# z>O`IhLOf6plii+*IU)*eq-S7K15HvM#Shzc&-M z1E40!LI*&c=&0#B32J`S2XLo|9Q*Ra^f7njWDmdf_M5N0{>Rt+DDC>6{WK>hXXx-z zi%M5qY41Y$#uSIfhJ_4=>P)IHODce@Hkpxgi{@74Mx)KOk33R3bJ3zxmmA`q;mhdW z*EbCQUH^|hFYof9itO%=Jpas^L4$9v{O)YjGcg|Td;j(OW>4R?XAkP1DRBkD&4gT_ zIccEEsSVA}K*C}KM6Zpx-Iuq$x;Agxl%4Oq-O$$5)E3^gb6fubH%ys1Ehl%<@DW31 z%*f5kxhH*G`kC*)ZHl&jU-#|uvSr!#-b#I^!3ywVV3EVRg;uM9# zR(7+JP4(4B)~qhQ@i#YJ*RS8K1;x7$9PYFerUz>q@LhXX%cjliM~xo*lWVUTkuiGX zTW?;B8tuMH*cg7qrMF+j#V_1sM%Tn^0Q?FM+{o9YWc2@4_@r-j5){>aunO{D!}NEyR;5S^bp4* zS4A4b)ek>fJYh=4!^N}jxqHZS8@JVVxwvkCh`xK%=t9|tl!z(S(Ri_P?!5f0aU&O& z&dr*fvu@j4EeQ{UI0Cp2L%M2!8BL6!f!?m-7_0Ulcp~e_4*+aQd5w!$)5%J90Q^(%PxM#>sx7?CBb?#?Xjdc0Oe2T`;0`>;7Eun;)Vd)sjmuvVww+o*+cm>8}q>3+4Uu>9zIY z@HaKzls;7S+gtnRj86~UKec$tf|-8}4IDXi;P5*)zqYBf?aJA6pUqoXu(<3WHLX!t z02u>D2>L#drh5bJv0GqUo+(g|aphDd#$4JG!jIcdyC*t?-|4BiDU7INCg5sc#cgUP zLc~#86E2w>)IgF7X|L;r2D)6rgxE%@bWw&B+>~G=(|4REQP9rtfKn>)9bxLA>EJu^ z6g8U2AhuC59ii`$bUUERdDUf91I-hV4r}$|qo?yBpGOZ+nW{IWGBwuNli-%sCF*XoMHjjTa0kfX8`an=W z^$XAtpY)z&rYZ6(G^BY1ZvlPU#S<<3Qg--g!?g4nEKRmI&}D&BF+q(2f)EuW5Rq~%myj02t+qh96rnBCc5Xd0 zb1r+Y@AF~pGt(wM_$CjolXG&;T5GTU|GxEK|L?z#m>GW`mgfG~08VZnDloyoKoNBy z3KB5{%o9a0gA9lQLd4Ml0^m>_7zl>oFab=7*2FuIW}DfkcOv)RO?L1-ob!ma(4xRr ztRuhbI_j5RiVas$>mX)kN;gG`KV~3+AsB`e!_1{Vu>`i9uNck%ai~Es1!pjIh?(E~ zjG4zCXSjdWrbh&IK8-6h)iD_=R6lnGBiDWnSw5C9Sos106T}h-A;(Ds6p=J62(AS0 z5P~XBEd7>ptyY7HKixz7!3P*=DXs&mhBw2h5OX0n$B51lAGx3DJMV-OZ2~Bu7=qw2 zGcX0oncKUEi5Ff(q!)9BNC$_4W?&x7;Y^9rW?+B)C+R=ud@LC8<>zQTa6hB5j@AaK zY`vJ7gRfKF`wAj~xOyGcvo{cTJ;Z5~(~Lj06FK)n0ysPlD>o@R2pF?(yuv#_zm@(& z^l;am{Wy#lXr15|1 zE@s-sicK4t{@qXLdG2}o%rm7K?F%m_G$J71Rrc$MQ&U5qd(o zMUsw^C8k+1OCA+*J%|KEjON3CVB)?zSt4MPF*LfAxcgBWcim3WG4d~dnZe7xKxh8} z^ynnBSq;B-4WXEAP#s=McHa5e(m{W;WQGS~_XxKq>AdtZm6=&EBRY?X(9G&o)_#K8 z=)fsT>b7m?*vosUy|R~D<|uYQ$^0`-md`gpgxSB|hwC3E%*`=}hn1@s`OL)xAB2`K zAnzo4T6%*b&VUXadXr`IEjD7X{3}3bh)dDeyKHz_sp265x zu4n4jn{h{v(lb3yk2#zNL>X!~&=WH>e3hwXD;T@_YO+-;2_oPTu+SA%%nT?5;I%7zmt6p0098GTzWLB5&OxMc@^d;%3g3L{5RUm>s7 zD9&8Z=rz|;|MbN~Rf376nuLFrrNBT6@`?AE-~T!x7PupaaE&H$3I7PY+8=ah$0PayYA?kN$s|?2(-5tjgKn z{vIRCmJ?Mm=dc*CP620aVE7x~Vpv*<1Fi}o!yFVPKZExK%puy9yv648f<6(>+O{1w zZ6Zcb_4JPrt-x>$U33YxGtWZ25Z~Cx-n;K1vm#~KS;;?-7^rxtcr5ggin2=vK_Li9 zK!Jexgw3Q(kb)E-O4ENiDr?tM*?iGLm5$oP%&4qbMrFlH0Gic4+Sy+)wNk^iEW3gc zPzi~PNeoiyb1~I?lLT6Xpi&T>q(f|!H95oZI0TuWgVtQiXXYRiL_AuwaYYNX0*wZe zN31j=uIt&Pz*G@kw6@L!kuF085r>q;CE^yJ`R8Phg6tfh$54MqJJ4f*Z+XN z&u(T+IuJaX7r086);Et5Fv-dr3bEv?>+Zx!XD0}$pi#Jm{z4q)dkK|Zoa9)49rcm; z_djy@y%!UK-+hO?nUVV*q+S6kSOl{I(;RUgEG9FSEFynenmEU)AQr%Aj6?w>OOz2I zh@hngfP?xd;fky99~{PM8x@a@e2iM(7?snPEM(gIwDXWmy*MLE2eZ6O--VI`prxPo zT`+m@bn+%l9zg~iUJ4M0Lz5z!LC-MDuDPz%16zm`13Dd;oxwX<9M{r(O-|rCZK8`M z;FIVoh7o_uo&+b<*Q{ak@h3Ta+s#xzz5+GHSxAJ|BtI6Uj7Cl&T-PrzJe7KvzyqN$ zY1)d$ev&{z;$mZr%997?%OYZVqvag;ue2pBQ>(sU3{n*QIlbd&V( ylk_wq-3PC-PX+RFGn-jN|53g842 z1Oqu9ot%V`N!NdFNklkom~(=d4dRLkOM(L2sk=G z1~?Q427)0tOaN1YHSrFl*=FXs?Z^XvAV2sX&UwUIXjx)QS5sVf6ZNaE!iK7-b#UU5 zE+z#W01=`Y2w(_?;lwa=u}>_5PVXy*Ge8__kePxrm^{SvZ+^z~lTR_!YSSZvIv<}a zG}SSYRj7Y{<{E}?{0g#UF<2J|VCe$_CWu8aLV=SInUwfg5M0`XL&#KdV)1`TbF~_b z|M`B}k37t9OK}}gHM|*4g-{5EIfiwb@c2Va-Fq*bXhVuY;z=!-5$a;6WyPIb?# zh-8EntEry9mayYd&YGBF?Ah(eg_kn8>C!GJhsR+lc)>x2G4sZ&yz}!r={qzAJqv+= zxi$#6kb^k_9w!Fvqa1kb5mtO_8v_@t<><4|GjM#8Jny4fHVJ1hW#GEc^8Sy1L|bdD zxaEHq!jS_spEc^v$WM&XcySklpV}BfrJ&8LBq}GPJ$0O!Bh#$jdLw@02GH{4n?XSY zTn^4t?0~TJ9)!J;U7dO_t0xK!lmUJ&5ZYBAcCM z77xpoGyLhxPo@N)2`yhj(TOs)_ydYK13GZ%O^*HY7vzV=X!b9l^iXNeFk62aVeyy0 z&(NmzsFsL9@ELy5IV}Ft%}m~TJMQRFdZxzcF^BVjD1+?=dSaS}uQEBhl*QLyPriH^ zm?WVKcmyo#W>U-yCk4LSAsKFJj(qicYFoD;l*kj0Q0(4IZk@=E6DSo4C1yFj8?QvZ zUeLH>8-8pY6+ud)Kv7?zsMdcd&t1dF4L4H%Idtn#4cNeqS6hV}pmFw`s!zm|c)YoiaqJJTs+6cP( zLMD$LrelHn$Pxz5U&n%rHj*tKMa?jcA&N{{R|x5g7d#o0Z@tOByMBL4z1gC4U}a#q zr-wx;w@p_DIGk6|C;meIc)?U&<@|4ckKxfJ1XavAEM!=xg!9%i^tEp=B(1oht3sAz z4$7q8%zIQdWps0hc2noc=8KYE5zgDP71pmO1W)zs4-u@ya135{CAD+UL%a~)*vpJ37PU7J= zk_X5!JPtwTW}!73dCnc=f`~`UHm+=eR-n;9ihw2K;kpJyN=$zh(XK|onIO_tupr_P zPDUz~8AakYx^@c05K*d)30e=_L;Ja>X;_8qk}Ejt+D(Aa*!c|29own50y;KM@7x?R zFVIv`ogvN;!YO8u^xLPkPnS*%pMq#QeF7Q+&M8vw!!19D$?Cv&=97^MVFP z->OfrcH26{TF6^_IsBa;Qekd>a4scf-zbAO|A5{rHn3Paka@Hyag{u-V;&{LBu@(q zA?ez6BXh4I4Q8cI_d-AAAf)1@Ov*sp}+eMMKh=HJxIL* zRImVMC8h=9JXnaPFj`hLnMue0f;kP8hCmQN@+c`0G7&W85O7c*A-m=}{0E0|+D64= z!ylp6yO_$^3+E%?eRtY;`4DFW>0nl*CEa`}1JLC6{h6SO%+o2FFmVLwcX%m591bND ziyG+}V)TE8n^Hcp`JH1xrvo$7cqb>HYchco*Uxt^YIqkn0c53NW0P>KLv`7?kVV(wyIN9B z%%0xj6>DaSi6{Tg2mjoGl^`xhERIwp7Sc#|>Q8^>^R#9Wi*u0y4P*#nIinYBWa#S6 z*rJ69*(p-e#I`$4U(&sdiWcbX6tux*9uvhhnK==pbl6ExbLJ$cP)DpC&Jue$uHKJk z4hhOpIA#j2drdX5xj*bT>%Nw!$^QZHihv~R$9he zXiNLPJzh|t(3V0PA}0RtdiwNve&_tpdCsYjQc8A!GX8&UfMsQFe~B69y+1OwFo-v7 z!(=&t!+sE_C1*{P*gk9K@q5m3W2BQ`eF4@K5qUUEp6BVRR(6@q+X>=DojAp%fl<6{ zklu8Z;|*_8la;+4dqgMfIm2hEAOIGB=IX5r+|wf403vTNG%|#1BM3t!`-^ii0wQpY z?g*sOngH+TBq;*0w#p;X019;M}HXsbMo<-rwx@dY=4c$B97@6Z%^AFsQQQMthM z*bm7;qsSq*#ENZkv-E%5`i@?`A_n4j?nd;OSqBhOdZg-l zo1aF9aO%DPx7*?W$5%SEmxfB?XL8W9|Cl^+ZW z8V`SdN=t4|e9)G4mx(`5a?$0B8MB}mf`s)1dq)&gQ+HvLEna<(ulu|3tj}R+=E;WF zsW8NLfeId~YUPmkGTou&^A;eSU?ISQ)p3&MLdWL%h}2!U7BuFR8XUGlN^E%)$}m&& zQ}`m01o=CR$C%g5DCTNxnTEJ>$s3yP!nF{_7d^fOwgL(i)5^~jb1u%TS%|0zEy#aV zAZn8#-fbx|QOtGZC7pFjYmAguoTWXkq2*%VeT5UdVcDkhNp0Gk{yQ%;Ei}dK{4|gq zKZ@GW1BsPRD=)igf#0(&y15TbvY`~({{Z4iu2>~b^#AZL3pqORH$wL_4Pv+yY8 zO8Rf`Eo6wXDXMhs*fL10O>4%}v||lOhQWk_kGa4MdTtK!J&!duZC-8``~e~qU^b+l zuaKc{x#kOOvCw8@!CL$Z9ktKKT@UdfQcA)%nV7!Ly_Jh8eF^d~Sz9frDyqen rk=nj({HM1y?U)w-KgfFR7?6Je=5U*+V4Z$;00000NkvXXu0mjf$#E30 delta 1054 zcmV+(1mXL{3jPTpiBL{Q4GJ0x0000DNk~Le0000b0000Y2m$~A09W~k?2#cJ3g841 z1|bW|z&J0FN!EV@$w@>(R7i>KmS1R7R~*NGC$~4bNpAkNNz<@e?LVD!wAI!k21RUP zd(riw51j$=p@Jg1!PvuwFoudR4hMUfIDHWWoo<4HB8puRW~~-GR@&O)pH$PNCb@0z zO>)!w@9d#To3uAc?}%j&`@P-!yXX74zwbG}a}L57!zzD}bfg_iO{S2rH8g_NG zeA{5M6l?xuF?#$;E*JpJ{c+>j`8SeMBp!Y=IzAdwg%P!z%WZl9#NW9+IhuF9$bBz{ zzPt906>@)lfE<<8$Gd8`8)vRQXY4W|Cs2lTLJ?>#EwNCX1}@gxG!vPUT;uwFMm)nGaO;rl%?j1 zjc0wvi#M`i008!53p`;i;QL_&wQjx8ZnG{EEEq2Xe;>LS;?j>sl1Pej_Kc$PhNkl? z+s}X4Q@;=OMl;6}ZM$2(t|1oMspf;a&TY))K4E?>^P;>&!f19MYIC|*)PGnGh2qjI z+2E#~6|}>N#b7MRDN45B!S?2kW<9Ag9+~YGM-OcJ#G+-tCOwtM_Ij!SqT%Php|>ik zI{HXkb?@Nw1g)26g#-Wqm}vWs?dv|@;@W?p2Y>>+w2dT|SRieg72}cKfv$dqU1BUE zNQCSkH=f%`O~fRMr0VGsB2zMNzssReT;xoyQZ!RWmz9x*`5`1_^O&YVVUd&!@4{tdbyLiMGD24>#+^xidYF96`_em$@$V-cT}FoIH#b5}K~`MS080cm3a zK)a3FcniiZzR_soavq^03?y)~d_-opS&1cIrHw5V;dp{qpo}7NmXUGZiZ`DO{CJ1s z|HWTtgwb67MR((8wjAl~`=|IMFm?A$YOB>82pk4;d!4J1*5$OixcBSAvD*9D|GeVH YKbgRsw0;E%OaK4?07*qoM6N<$g6|Fs2LJ#7 diff --git a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md index 1c33a5b370..8643d025ea 100644 --- a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md @@ -68,7 +68,7 @@ Icon | Description ![Active threat icon](images/active-threat-icon.png)| Active threat – Threats actively executing at the time of detection. ![Remediated icon](images/remediated-icon.png)| Remediated – Threat removed from the machine. ![Not remediated icon](images/not-remediated-icon.png)| Not remediated – Threat not removed from the machine. -![Thunderbolt icon](images/atp-thunderbolt-icon.png) | Indicates events that triggered an alert in the **Alert process tree**. +![Thunderbolt icon](images/atp-thunderbolt-icon.png)| Indicates events that triggered an alert in the **Alert process tree**. ![Windows Defender AV events icon](images\atp-windows-defender-av-events-icon.png)| Windows Defender AV events ![Application Guard events icon](images\atp-Application-Guard-events-icon.png)| Application Guard events ![Device Guard events icon](images\atp-Device-Guard-events-icon.png)| Device Guard events From 4e0969634c72d52c2c2730b824eb4bb7eabb6783 Mon Sep 17 00:00:00 2001 From: Tanya Bittenmaster <30839220+tbit0001@users.noreply.github.com> Date: Mon, 16 Oct 2017 10:28:02 -0400 Subject: [PATCH 06/12] Update icons --- .../images/active-threat-icon.png | Bin 2016 -> 813 bytes .../images/alert-icon.png | Bin 1600 -> 831 bytes .../atp-Application-Guard-events-icon.png | Bin 803 -> 971 bytes .../images/atp-Device-Guard-events-icon.png | Bin 773 -> 803 bytes .../images/atp-ETW--event-icon.png | Bin 1418 -> 0 bytes .../images/atp-ETW-event-icon.png | Bin 0 -> 1119 bytes .../images/atp-Exploit-Guard-events-icon.png | Bin 754 -> 880 bytes .../images/atp-File-path-icon.png | Bin 582 -> 751 bytes .../images/atp-Firewall-events-icon.png | Bin 722 -> 905 bytes .../images/atp-Other-events-icon.png | Bin 820 -> 972 bytes .../images/atp-Smart-Screen-events-icon.png | Bin 782 -> 888 bytes .../atp-access-token-modification-icon.png | Bin 771 -> 897 bytes .../images/atp-command-line-icon.png | Bin 595 -> 914 bytes .../images/atp-file-creation-icon.png | Bin 534 -> 793 bytes .../images/atp-file-observed-icon.png | Bin 501 -> 724 bytes .../images/atp-logo-icon.png | Bin 0 -> 1068 bytes .../images/atp-machine-icon.png | Bin 0 -> 696 bytes .../images/atp-memory-allocation-icon.png | Bin 1886 -> 987 bytes .../images/atp-module-load-icon.png | Bin 767 -> 944 bytes .../atp-network-communications-icon.png | Bin 680 -> 954 bytes .../atp-powershell-command-run-icon.png | Bin 538 -> 796 bytes .../images/atp-process-event-icon.png | Bin 896 -> 1088 bytes .../images/atp-process-injection.png | Bin 897 -> 756 bytes .../images/atp-process-tree.png | Bin 682 -> 937 bytes .../images/atp-registry-event-icon.png | Bin 535 -> 965 bytes .../images/atp-respond-action-icon.png | Bin 921 -> 847 bytes .../images/atp-signer-icon.png | Bin 666 -> 1009 bytes .../images/atp-thunderbolt-icon.png | Bin 1960 -> 2085 bytes .../images/atp-unsigned-file-icon.png | Bin 775 -> 1001 bytes .../atp-windows-defender-av-events-icon.png | Bin 682 -> 654 bytes .../images/detection-icon.png | Bin 2827 -> 1055 bytes .../images/not-remediated-icon.png | Bin 2440 -> 1615 bytes .../images/remediated-icon.png | Bin 1348 -> 1611 bytes ...ows-defender-advanced-threat-protection.md | 2 ++ 34 files changed, 2 insertions(+) delete mode 100644 windows/threat-protection/windows-defender-atp/images/atp-ETW--event-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-ETW-event-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-logo-icon.png create mode 100644 windows/threat-protection/windows-defender-atp/images/atp-machine-icon.png diff --git a/windows/threat-protection/windows-defender-atp/images/active-threat-icon.png b/windows/threat-protection/windows-defender-atp/images/active-threat-icon.png index d1bd6bfc8102406103d752c3efbc34576bcff250..3f99e1ae032f5047e6994e26e4ec8a0cc647a6d4 100644 GIT binary patch delta 612 zcmV-q0-OEd53L4CiBL{Q4GJ0x0000DNk~Le0000O0000O2nGNE0N{5$_y7O^32;bR za{vGi!~g&e!~vBn4jTXf00(qQO+^Rc3J?wm9Ni<<^pQ!{e*ySOL_t(YiJetJuBt!~ ztR^q6OpHhHB;XA^fTuEg0D%Lz2e#-^IEV`ufD5Mn;{Be$Fg%~HlUXo5-PKjoJ%De_ z7(X&ZvoW$zMmXQl7u2+K|WzI%Ru+E`r%5F z$uJBj9VKa+a=+h0L~uA9uwJiWjDd)N zBt!&35TNgStX3;LpU;s`ZMj@xx7*q8uIsQ^ECBa!IPhM3VfvTrL)s yB!VEox8!)c?=xk#*=zs+LMO_l{!^0Q*gwht5|c)URGOIp0000`Gt3kVy;u_%Yc!2$)5Nr*q7^NI>BVX6g%D^>X-Z8@6Jz4#!3UpwurEeUd?6Z* zF+@|P6iR7JDHmbr1xgVpbfz8KYAqC@6zRY)GvC?!@5A2bJKs1V?7b@`4l^K9wg-?k9daAM-QfAy|OuO||2Z?jqgmytP7RaRKpB8&~Q z=An&Tbop!++;klP*L;3H^RBs?#~)n7(cw{o)x;E*t4X~_Gpzl?8%NX#D^NOlFeB21 zn1&H?h8aBcG+TEMaog>;F{=k&*!g!(k6y%*JMQ4Ep?;oudN%=x`McgdW6GO(E`Xh$ ze;^>Ljye$XDafJ|DR3A+#iMK2Fk{xIxb>z!jt?H--o?w=__u@1oj0E^&7H;S)vGx% z5-CgsMN|{C?f$Ik9pjwrFmMNV48yZ18RHm{p#v|mqyG>$FJ8iB-P7^W5nSSQ3rf3? z#Y=AG@T&v#_dknM60OYpb*SeA4km1#f4JtP=mRQ|%BBda$mkEV>aXkZk9?LJu3rE| zqE(oS(nSE~exZ*ASIy>uRlnu6F%hgl6xpYBMrZujrlosBUTt^#zq-yolRC$apkpN<;MAQS@)Y?bL_vPnPDje zQcNj)j)pmzd`a^Qf+c}MMxg+lWY6}8*|zrtcYpgwTs{pvX7ctJv*+|ObH;QEAjU4R zUcPtV-SnJzj`eHTwsj+DVved&e-u!Z6r&{N$EXm3s#Z&tDpjXn(hrt@O-sM?Lmh2N zm7-eXXBFc+Iy?Ly4emRnH{TxCNQ|nY6jez&tY7_fg%*8tnFiiGrAksuQBgrv6%?Wr z^6yem(uod;W`+aC7zLwj-?59muf48v;I-8TC|M5uY8d% zpxdWW6g_~``_Yf_^@Z2*iI4Z@9vez8ftg%!>5(V+%!=D_b7G_|nDr>zik*O^mc$FHkujdzH^j*B7!UkzC4X8uf;0|h zcob%q1=y*~a>pe^#0^SC3O8Cdoqz1#%kfi-=)L5UblB)99W`HHe-u;~t!T*=rhvvr zIezR7Mn)@IJ_9ESlX5|8mx5@>ldhV96mbRI(%KNFQTBB6;aQi_U6y#rrNABc#0pbP zS*v!L6U3MVt8m`WW#)WiTtb3ES!3K&Ck6?GtiCS9rY)<;x2lL25sCsjd|*+z7CDwl z9Sq8>Mv(|s00G62f8KM;_Z24{F9oE8h9tT0;!4J)+Qk7$nALrUHC}7(gdNo|bH*Sd z%+sA!xh%*GtD8EYtc@kb^i(xXcwwn_$uKMO79E_nX2YCM&AeG7?PPC}y7jtW^BTOR zYjnH37Za^#HyZ)RWz8MuSWPTj#M=GMG<$vaDz)t-3wPNDL17BI_gU!4wJ7T`$YILT+l!&i}uL^EUJ60yOGgfHwKtT~*pc!2bZvUX;)yhATY) O0000mzW2?`Jn z0~t=e`>>Ho)_(#DNklgiZ~!ubR2@YT@jJbeP9pYp?wPePKmW5CH4P81wd&Nh$UEhls!!gZe5n z_viCD03c0Mj7B58UN3aJU0f~~%w{tH!0B|-Z!CW zhX>$V9LEHJvMjS6KOPSad_JEW3ARR{*fYjR2w|Ns77JpG(O@v}oVEg(PF(iN?)SS+ z^6_{Kl2dC7;QfB<002ovPDHLkV1m@d3|IgF delta 1378 zcmV-o1)ci82EYs!2?-Sp zC>2716n>FO)_(;HNklYDin5JEr*;Wuz3(liB0 zKb9w)-`pYiTM`agmhA@&g0?YZ3|g%gf*^nsy;FQ~)Z@GC z3JD>)6axN23HN46l0XQ7AP8WLfwdM|Yd^96Dx?&w!2>_UxnZfGns`rCaha`+K z7#kbI{D1sBk|b$c*Qv&ljk&$Ojd$nF*!Nujp#Nu z#^RB}qyt+kW4;af9d1onxcX@N-GB(P;4E#f!Xk>lU@vG{$tr%s(T^ zzDihYVT?f-hWnEJej_O*c6WF2;ll@O4Aez3k&%5>ldb`rhNVhLx20qlhF#e) z&=by3)>@wpo12?xG#V(CN+_4hAPJ=ugb-L2UFgKX6m{j;5pWx2 zS$~FVwF;#af*^pk7VGQl`26`Zu3Wi-GiT0t6`c_sdZ{~*gv)nF=*yQcSX*1e@bEB- z#iCa#O;bF1@&sv`qFSv&2;s+^r<@wDp5!smnECV5T4P~h0YMO8a&oe5Zllq_$B!Rz z;=~CoE-to_cPbt~ejNAj-}lw?P$Znp4u9XieZ$7a2F{*6i*mW_9j>*;vuDph5_@}l zc>DG(q9{TbhRCuELI|X3in+Nt0Q<+$)x`SM32QA|t(MR4n>TN=QmJrdWrZY}Wtks$ zwIh$0FJH1$DzR8B^39t!U9};Pz9giSzPM~{ZE<*bnAfgdBT4@J`P0wK2bWT^)qiTS zUazxKsc>|3l*`M@B*|v8=?Qld8c4!nc6OGfQi-dpt3Hr}*1C;MyRYh`Sa%xLLdx7)a!NJy?YmN9OKTN zJGgrFYFlG-$XDWl#sv1$a(jClg?~Z;aU8=KgCt4t{{4IG?d@TDdfJ=p#fuks`0ydD zwYYch9>&MVp_D=xhW_3G>=!_-bsLF+#>}#;O?oLMKYjYda=FY}twyaiwbp#~>J=PNkIhK)GDz>({S)u7A%X%d*3h z$Omx$@9gZbSS+$utC1v^mX>(o!Ua|;6)rC?Q%Xr|ttah}&$M3XOTrlAgSr6I)6*Oo z8R6R6+8@<{gV48k1VP{(9Yqngwzjabv4NqXAtBWy z1CJg(g4P==Ih z_yHjV=H})OT?YmzW2?`Jn z1T`}x0hEzR)_($)Nkll2YT?(>Og z$7g0v3OU?Bf|DsaW|PT8D^OFE&1S7i z-HP|ceSasuyu8#(1AxSQK1Vv8_VQ|ueaWLJ0sw?zh|y?-o0}V)ot@$S{@$X@Qju#e zWl~Cxc5zOav{Qmx8v)Q0tujAw61MBq~&1Mtt@9!F1DwQlc zR52G97dt9+t78BhMbX}tt4s*NLI_^3*VY6-eY;yB)!BO)FQ1{}EE5%}wv>Sddpk47V}dZd&)0=d1t z#ogT<0<}Orm0EnVyS~0gqtUQ7l~U@0%sib==dV~-73PUd?W^a*!vmh4o-Dj6TL6gT z7@154YLV4v_L)1^Znt$WGJg_QtCh9J+cD)%`6j5Q*KW6Yxmc8P{Q+0oDE aDfoZ$Zze5w5qCWR0000J&t2crfdiBL{Q4GJ0x0000DNk~Le0000X0000X2nGNE09WL~Z;>G%2?-Sp zDj`t=f=Q7{)_(!+Nklf&v@(T1U?aAY zG{GW}!qO^VAXuh0U?&Ly3!9KS{k!5w4lgFzyTF}A1_GPix9?3}W{0g25&j!*|4jg> zNPOWvWBxCMQi}&K(TR#gjMpb&7zPwYfoEdx(h0vMf?nm3|9VRmrlf ztmUL$mQMfx8jVI_EA!B5wYYM;gfMeE5d;Blx7)9ibMMX5gzLKGI1aZ4T-PNcqA(13 z!jpQrzklO&I>9u}!VmF051Y*f)9DldFdPn{X&OAw<7!0i5iNqIX*eE_h@vQ&JD<;q zUjU!tp3mnPjYg^3@qo*$vf%sv1A%7O#B}7rgY&Ju`-%st+b^S+Vxy*_&27f^i004p@JlOT&aCq1w%W`UNyWQrJ zC?!k)m`o<{eLs2sF3eu9huv=Xw01lw?U<|8D(TF3FvhT6uM2aOCLxL-8MdF@3j#*k0B~abAQ>aM9s7S>40EQY0?iB%fn*aa+ N00>D%PDHLkV1mC3`pp0U diff --git a/windows/threat-protection/windows-defender-atp/images/atp-Device-Guard-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-Device-Guard-events-icon.png index 685a421cd752c18d3f78a0a8af6a569a57842b80..ed78852f1579ea2c536564e947823e2c5c942aa1 100644 GIT binary patch delta 574 zcmV-E0>S--2BQWciBL{Q4GJ0x0000DNk~Le0000O0000O2nGNE0N{5$_>mzW2?`Jn z1|(~uL*$W3*MIIwL_t(YiKSFKvVt%aJz-vHZ|4$Rg5r$s0vPw8TVMySz)xpEt;|?z zDK(viCEA6?oL6WfLh$kQ&SXL^=brmbM4sm)iLwYGVAKC4B;hy?lu{5vKmhnZO9RmX zI{HxDKP9wrH~`S^_dya$DUkeVXkf^vmM&-=%JjZ&y z#%8lYyWPg^cEfl)Mz`Aq0IXIkoKB}^85ASDTrONJ78F7d_x=%pIR`<&8=;#N7fid!ZpK%;lu;=rcv)Swg+qgu!X-Sg&nQbwk z%1y3ovX-XzL@5Qp@>G;XlaEFttHW|Ide=|ITL;BRJDm;yU_PJMl4{4->lM4*?ujY) zz;u(%7Sx<&8sK>v9=&*^1cO44PykrQ~EXApq|8d#lYa#Bv3fJy`$z00000 MNe4wvM6N<$f_Lo=AOHXW delta 543 zcmV+)0^t3l289M8iBL{Q4GJ0x0000DNk~Le0000W0000X2nGNE0JtWpQIR1Z2?-Sp zEfqiZ;5(5?*MHDSL_t(oh3(cctLiWq2H@Ar-Ndo}fYQ22Cl{r0RqLqWri+UR{s5(e zZe1-p2t{#oadPTbMK{5&isjW_WuF! zH=zArtxF>IFYpG$4hY(Wx9GZ#`FtLEqE@SgZnyh$0Dk}of`Cq^6MFK=WD;0=3Xn>r zKnMv9ST2{*0F+Ybx*i%pDTO3S;Q^lK;dDBM26&zqSbGW}iXvvSS!h7J-Hrx$HnweJ zyfFDZ*Bk+2_Yi@000VfMObu0Z*X~XX=iA30IUzpIsgCw4s=CWbVG7w zVRUJ4ZXk4NZDjy8_YVmG000SeMObuGZ)S9NVRB^vU2y+80000BbVXQnL}_zlY+-3_ zWpV(wz_gD5000PdMObuKVRCM1Zf5|%8|H@q000McMObuGZ*_8GWdQa6gX;hQ00?wN zSad^gZEa<4bO83umcIZ100wkLSaeirbZlh+sP57y000D4Nklb0xH<8gXE@4@YMv)N|Sbsf9iUe!md z)S{!KqYMlTU?nW3YKHP3M3kwU3jg7Hq z&mIDS0I^t%NF+j6R~PN=?d8Y;rfIKP3pF8L=-9Di1cN~g!$3rsot*{j^UAElv0>>lNGhX+S(d{K!DE9&f4wx8dapnxJ4-Ygt)HS&+g!hXUA$heOifLRh)AhaDqqE-WYTF_ zU0oFsk+rooSy@?;d_FHqDM_VL68It@{%*g_%*@o)q7~C2A{2{7A`=nj=jS&jB$S7n zuIm(wMGV70(=*;iwzB7FcTpPgW^HmK*MF@w(!S;`~^I+luk@3i@kjTct zMf=CBw%hHjrdQE*okSwR(9qDEL-h3Y(A?a-F~I7TVHos(+fP29$KU1W^y$+z_f%}r zHcjZ?c^CRmK-j2xAb{XE z)7O>#A(sHJh9%?E86IFE*N76w(vpn)B8HXg&VYn?N`OKxsl~}fnFS@8`FRY&oQldo zaW0U!bACZ(QD%BZ3BwxxGgd%RKCoy}Y9dIfLP=(BDud~FeomkaCrBnZKdq!Zu_%=x zw%|WVIXBqw%;MynM4-|lhV2Ko^aF)CK*HgPMR}Qd=?n*?pS1(U*dh8$i;`0rzW#51 z4O8ZvpPQSSSHke^%(VSLF*cC0kj#>tRE8DrE~zsxFl%|bIEHw1?ww}qq3kGfyguKu zKzIwMnH#s_%|pi`vZf0-vQ$f7UcJ$%>`>S&w+)6jvJ;b4BRUm07Ugd6(P>d>a>|+Z z#_Zlrfee)`@xLzXd`QDq~4c{lb<=hVY!+&Gj+DQe~)vImJdq1gVz5iXgnBn%e zsf-J*$S-f&8Ml7(o;_!tK22?z$Fek}M_*~<|2kHlr6NjBd*jmU>*WO>K6|F7W}>6= zgYQ~f;)CCIeUCTn+vle?`RD30+j8G#ZN3?zw8+JUvFhJRj(?RkHCKvqZ-?DdZut4L z($CND#?70KE;sJpO)V`IJzgjwFVB9UP^RIAR6u_h>wryKPL_|Vn zCTBz0?%vc$h8^p;9qi__FSwdD@%;0x0r$Ueos)0NC7{8{&FZlE=b z{{H?;E@!S=zg{`4jrIEL(reeQN${}g=;;|58#6mt&F$mjPQRP+&~TD(ubcDEb*p2p zhxWQDA1jYF-#DT4AltRxd2b&+T)0eDMkZiwn4z!mWs{X*s}1WUHY)jl(&*{!u!t)ETw**ze!g&!0bMNZA~j zwN;AY`0?XbzqO`vO`be?2PEPpb$DIGd|n3-W(s;XAEigU!xjD&io)0Yws_= zn31vcZr*eswaIHVVy=3MwM|y#)YjH!D6x{=baTxz_M-iJ`s=!4^rruay2SQxJ^PdV Y_{~BG?@Tqf1m+_KPgg&ebxsLQ0F|iQZ~y=R literal 0 HcmV?d00001 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-Exploit-Guard-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-Exploit-Guard-events-icon.png index 3fb92bd96e26ad601570f18951fe6a21ce440257..01da17affc73ac619163191ab59f5081aef32db1 100644 GIT binary patch delta 652 zcmV;70(1TH1@HzTiBL{Q4GJ0x0000DNk~Le0000O0000O2nGNE0N{5$_>mzW2?`Jn z2@$%9n+TCf)_(#!Nklm! z5#RSS_iPpArRCc+-EKEbCKEIo4ZBw|hT^&ZiG%oA7>2l9E&$#fbUGa@7K?;_34kpz zb1`n*?0-j51ORwE9ylJ47!HRSa3KVy(xwC3j6*3?MyCXIpm$sXIn*v_&jn+ z()WGh?~MBuAPyv@Bmhn(lUygX*1X^Ewg+~*-RA%#dA(i}4W_kDL~y&^2!K*bdY(s; z-&FySD+MfOMWWn@wUQjK|}|w=w>81aY7+3^Q|QI-O?p mzltCoiBgKo^=!2?-Sp zFDW9g{yvdO)_(!LNklp$=`>QQ)N4RE=U00R0I^sM zyWK7@$Kh~5B9XZ6Ktw^0mK?{STrNkB<6N|FHXAAyizKDImf|rVG|o9{wHgM4!I{nX zeT+sURI63Q(>WfHi^T$k zLgBcD17tj`BEL16OvthmzW2?`Jn z3^x_?>adYX*MGW6L_t(YiS1S~uEH=3wKKsLxJ)x}4Nd_^;R1*Q&>fh|+OrR!8l=Nx>DV4WUZyDs%W`frelJL7@r6L^m@IL zSA>66s45xroeQFw)b~9R5iJ&r#O8G%@W$u!8G!O9OAP$eeoXQOS(QU}nU}@H00000 LNkvXXu0mjf)E@3j delta 351 zcmV-l0igcx1;zv+iBL{Q4GJ0x0000DNk~Le0000X0000X2nGNE09WL~Z;>G%2?-Sp zGY$CLN3xMg*MAX7L_t(oh3(g|jzmBl$MK)bmeWq+0hm^!^g7B-M61?I&?xA63!$Bf zmP9Sl>Rsh7o0HtxyEQJEZ#jZbCh~{2t}A5sCK~`K#Agbzr4U=Uowc(EhjxjbIE1L{ z8n$gCNfLR8SEUeJ{}<79oqWVF44CIxE@D|08)Vv8~MaYN7ZKnOt`$A_-*r^Cv!EW~jPO6j5V xw4MJB^(Z|dErr;+1Y&PaXlElXu@jd-yaPo~QKE;SIWPbK002ovPDHLkV1lu3mFoZi diff --git a/windows/threat-protection/windows-defender-atp/images/atp-Firewall-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-Firewall-events-icon.png index 5a89b9c93a19dd990d2d53627baba33b793f92ec..56db0095fa1177d3e4e7442464a1027f0039fc2b 100644 GIT binary patch delta 677 zcmV;W0$Tmj1&IeCiBL{Q4GJ0x0000DNk~Le0000O0000O2nGNE0N{5$_>mzW2?`Jn z3=2A(mN$_})_($2Nkl+!8N`4U>o?}~46ap|aB+({jMvSqn&YGp>&@mTPJ6 z?cm@5Gvn^=4oRi0J003Q+TPx-%+q{#<$X9DB8h&#Ux};-kmos9S68Ls)6)~Kzr4I` zO^ajmJO|+X{G8L%Q}R3~gg}h31h-yNT~}`*gjTH2$K$aispp6pi!oNs(V*2 z&2*fWYh732ffLQ!%gYOr7>~zD;`{r%T=TILE`Q510B&z@D@1b%ZKpcX>d~a*dj5yQ zApl!jTNQnI$xbvg}i=x&HN~t&}OiY&NT&nq2PA z&JKr%hXB74Z7>*ce}B((I<4;Ir#abD!ufbInaIqvSS(rz=D5XTp%6m(AM`wrUteEk zUT)L!^ZCce2a;H=Rsbcwj$5r(6|$CZk>CDrUnju+{(c45g)hI?`ht?*s7vZ(GqXl1 z@9yqmWJh9fzeV#0iKdYg4FBd(00000 LNkvXXu0mjf&3{A9 delta 493 zcmV^=!2?-Sp zG!8D4fX|Uh)_(z=Nkl{l5QUF7x5SoYYqTbY*6=JA(5Mv;Vgu6HnD`Ky zSiu`WyIL>Q((kR7EI*4RlB*`1goK?lVLo7X0u#iSj0|EqB(;^bqV z$OuxGsz*u%L4f1&_)?M8YK84~`x*!U%w{vJ*Xwfad4C=@n+*)ZXyo4SckK6j>~=c< zKp2L-V0(c~r&HLrU5Ocn(TK?s-syB24umm=AP6e4>-CB>O&hs+o&!Lc&lrPgn!|t; zMS&zq%JpKgK$d05vJ8|`XqpB>NW~ZVMN#xA(GO%kpW|>iw0f@V!Zb}~GrF!j9LVGG zKpe+PFMrSTPJb|v+wBI=^E&mzW2?`Jn z4>vyExpR?8)_($*NklkgkG=5#ec;GBErMN16jB`#l4e*Ai!En znx-5dAG5l;imKuxh@wbEL`6ga|NNKb-g$n0&PM>Sv$Mn1)fK0wr-%q=XJ;H99+IXh z%gf6Eq-hFJk^xp$Rya5~Ktu?`@H@g{?goQ_0y-QH{h2XFlO*wSk|b)3DRI(jwG_}O zihKlAk$?B}^yK$(9Qza)W7HVq`eZ7u?bg={rs@$&LQ z7>3;6-}|#{#i=U2UXP=rBWAN1dwY9qY-|7!hT*rNy810vN59|qDeCw8C4Chqo`b41 zxrPI@+wJ~UpLLM6_ag@9a;lFvgTRdORL`{b)4OAP90i%x1Hk4d2Pm(R4cH_V$+T?QL4E7M)Iq z&(BYW!yy3c>+5tn9RMybFMTz&+ilj?)@U>uxhgDmauh|m`gXr!GMSWSja!q+q?W%* z4u1fe%_db45w5SVxx2gbvN5LeZWarg8NEe%O}VZZ?UCzB0eRms9kck^K|gH=}6WTB~BM)w+@WTWH}= bKo)-hX6yjJb6xa<00000NkvXXu0mjfu7YSo delta 592 zcmV-W0^=!2?-Sp zI3Ql|!VHl~)_(#2Nkl$AmT7Nhab+FV^1KPK~lb>PGTB|2~wGgh8Sx!f-f5k|b{dX@9&JXvIR3Bp8iG00320g`JPb zWAu8xr*X@MS2a>d(=_z^eFQ;(ZnrB0vDs|EITzXs03f2O=RuC+P#niZM3iM2g<(iU zL}3_GmSuN)4Z|Sc_n*0;XYqt?EK*jw}|72itzXf3R)0TX4=Xo6UrM3xOz#0$tZ} zJRXG|2SI=&NuX((*a4B$$S96uGEK8cn`ml;x<*!co_|!h4_)&X5CMJdSMi;yLCUH@ e${DIb%K8IN$>7b*nJf|j0000mzW2?`Jn z6eVO)1EG;g)_(#+Nkl~AOe3A;~1Bx8Ht%$u1Q^nsL;OgtVBn$PD1fB+C z8SQr4vI`-wTrM%4PC-Q4J{Szp?RL>>wNS6uF&d2kGZGcqcswS~d7*UXdmP8)`+iP3 z<%d4(1c1UYq$rB$^?Ft6nk7|aVHj$82ZI3-5&Z#xe!q`Sr}IwdlQI#3F=k04rG(=+ zIXeI}8h;Hm8V%HHHEkmzI7(|%_af&2;5bgsW`c;2B#A!D7=x4DV3K?b^ISGSiy)iH zw=nmb5?chyAf^1;aT%J;=9_>qhQs0TlTwAwMKI-5HR$zv?;j@M>lz$FW70GV5)03>ACiL56GSM62IL<{_mYMl^55v$VP@9t^A;)oY zBvq2FRx5pGu~_8RVII8QZn{W}F^Zz7)cIz!(Oom2&vWZm2Fl6(ez!Uu(6TyNJyk?v4x);DHk;*c uKC{zIKX%jpLL!79*L8Dkm~G#p^M3(c=QmN8pmd)A0000 delta 553 zcmV+^0@nTb295?HiBL{Q4GJ0x0000DNk~Le0000W0000X2nGNE0JtWpQIR1Z2?-Sq z12}N(-&K)G)_(!nNklBrwJx%W{_Wp>DSe#uy|? z%Jf$L6@Pp?K)qhC7NFg3mj`IITDafurNeKxTc#%!px^Jq_kDPtS2+A~xc~qdW90#4 zS;k;6!0B`<4B$8phQndDF|7{}5eXrv*Xxn%y1Dy+5Q0=yeRa=MUM2t$(Q>&Y&Uvn8 z6h#qfnnvsO`jw?P01*-AoD9Rr4CkEFVzEfGm2w04nEcgBxUQQgyga}Mgkcz@X&MP3 z9^;3@fmBt^6aE)K?(O)qEX%@Xv%z>gMi2zJUay$X=a@_;c|MT*+i{va&%mzW2?`Jn z03l715bcpk)_(#_Nkl>lK5PkAcFauY}5mM7(c~ay8DamjMxB}b&F5m;e z0aT=dlo4f;7E0)_8}xqh|LRM&OeQ;{ktOZEx4Yh5kfd{tBzZg@`TF`w0Ij8zA^?_U z$=?VB+!zx9O(qkTWy#HE!{u@rz2$k%s;Wqmx7&@OlYesd1R=N>pH8PpNsKp}4YMrs zy3O}w1n2YFdp4iXe>C{~{PYBi#p13mNn*WTM;=*gJ>h=8Po`nF+j*VK<TIp`c12ON zI$H!)RrxV6nM^vP5a7D5S=Y5Ek$%uxdyCSS+|&tvH*_yr-$sY?4SM&bhw?!gfBNTVUaL6GT>+1*KF(lKit( zRnb~YV+^<3EsZfe9*#o=9wI*r0eSaa&x#;IgBT59l z=8$5?!0OTqC#zBl{eHhaO;Z3VX@ZFi1_N&&?f~!y+D(fcy4n&_00000NkvXXu0mjf Dr?52~ delta 542 zcmV+(0^$9E2ZIJ7iBL{Q4GJ0x0000DNk~Le0000Z0000W2nGNE0GLg|_mLqV2?-Sp zDKTf6!S0bs)_(!cNkl3_2cdJJ84@hgnX$x`At%l|Z+=Rv;bP9sj zY!2s!n)DBZTU(RR4@g~e{_c`;yJUJTsljIvj^B}o<9A+<6(Yi?@O{0$+o%EnUvHMU zp_ECYlu6>FWWLi&ZrN-$*lxEtolXD%K@iaI_c0g@o`069TthE4XM!NWbUFn9^m;wW zvJ3#QZ5zAY4gfHp&%tqAE{}i7EEWq~E*H#Zv%B|oT}Q1}!(=kaEdwF~rQo_QNs>gq z?~`R#XvTka8-zQ0u$aUSc$K3-&l&ygs$AKt{4_^VtaS%ljj^pH682}j@I1EGZ zJP!bnWq&#Dm%s2lk1z~#%Vb)aYPAZ_^HS?P&qJfpC|0J^>0rO#BM5@j+T-z9tW2}n zM7P_;a=Cn17wt4%*Nc+@fYE4#^Z5)#QDED4JZ{@I6h*;mwR&18bIwHEOW=CFj#jG$ zRaN7hCz%mVvLbt81cBKX=kKqTIQU2iOg@Q-!eo*vblX zmw&ZQ(?q-7j(bQDgv{CVQW;fMaX1_>91e5MFYG)Mt&nM&ndkg_Hx)$rtMZUiCW%re giRh$Pd8@^hA6Gd5b;26BxBvhE07*qoM6N<$f{rEg=>Px# diff --git a/windows/threat-protection/windows-defender-atp/images/atp-command-line-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-command-line-icon.png index 68b1df7c314ce066889fdf99cca33b3c87f8be91..58dfb84419ab92aa4830c862ec59f37dba6ea9de 100644 GIT binary patch delta 686 zcmV;f0#W_b1d<0KiBL{Q4GJ0x0000DNk~Le0000O0000O2nGNE0N{5$_>mzW2?`Jn z1t3S_)IO0()_($BNkl_Q4La z0Yo2B)6k%lKsrcG8VVYOuR!>`BG|h31_*gi??{&I@p#7bYYQQW{|E!76qp&(@AcOC z%X?>LnOHtd`+0=}Rb|P7q9}+l;+z8@#`tR`k}CI{bAL1%jjDq0UNf%+Q+vLM!Mw_T z;&o<*_Z~@=5o4U9eK+d7F-E-im>Dh+%b3?q^?S)8Nh~Bn-Q=PuczAf=>FJ5(W>%3?Udwy07^4zKqmclaS)R|%&Ll~%udfOrNRqtw0#p=5 zzMtk!r+*_rn3=rymBS?T@$oSWm8ARodpYOS>2xGXgTX*%rpwDq)zR&CWoB~q6uY~- z1K|4lnpUfYB%00UBqN+7#>mFT1^_!dJ4oX6^t2MUa=^2T5{AQJHap?t<0G#_2nr!& zYkR$(0FB4vikrLLt^m1u)}%IZb90kv&N(D89DfdJHk%wC9_An(9UTGC@AoT#jWJH{ zCIJcUb{l~G{e8ycF#ylc&%D3Cv$V7XkX;1OYPC2%KIY`)grX=akIIiuK})#3y`5x0 zY4m!%sX!(S1_J@QxVXr)lwnhKAc^hmZ9)i)Mk8KcURYgSWqp0U;=(fj?(Q!AexJR) zJ$K45vq_SIji#|EG{nQSd^hu$yZlbyuH0;qCVSiU2u6WD@*Hg)64%0 zwQl-VXPnuRf9R%JL0$VSCBMZ&uC_V8$yq4Na%Dm)jzs$x;YpV1Q_`$V`CAMA0JAl1 UaPe(({r~^~07*qoM6N<$f{|`Tpa1{> delta 365 zcmV-z0h0cb2h#*0iBL{Q4GJ0x0000DNk~Le0000W0000X2nGNE0JtWpQIR1Z2?-Sp zEFlM3CC`yb)_(yWNkl8wL8AcBRBr3c6nQs)5at*pF44iNAT zHWrq4HWq?6kdz+4DRyRAciA0vCpfTqO&~np`||U@N4#ZOaAv%n+T8)X0>I^Vp5;XE zbOjv1&K4TKPoQXU7`Qsk#lNqcS@-b6*%Xp>v~VgeF_jl5XUj{JO`x|jInRi5d;Ccu0xU}&j$eB zU-_HFSvHoz7_+&al`(v}32kmd@AfNp9})-P035*o1-P$b?<{~TJpf!4?c&Bu00000 LNkvXXu0mjf6U~xi diff --git a/windows/threat-protection/windows-defender-atp/images/atp-file-creation-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-file-creation-icon.png index ea1d20b52168e2bf9ef3173211783161233a48d9..83d2afbcd8726a9f08fa0574df7a6ec3bb658f83 100644 GIT binary patch delta 564 zcmV-40?YlD1epdQiBL{Q4GJ0x0000DNk~Le0000O0000O2nGNE0N{5$_>mzW2?`Jn z3lWIF`HGQA)_(!yNkl)n38XB(=js@ERA zK@vg;ki>4c14(6q5CTCE;BvWOxm*GO=JPr7JVzYIb$^`e4m*Q5jvG6AzuzRu+wE3o zqwaa08#}fk^b2RL8WI4>(3;yUayg5 z8H5l>k_3mt!71X*z$UeEJRY&xY%rZpYtq?lhN37?Rh8lEDRSGOLl;$qX__|tk|b$l z;pxGyoqy~0$z+1zq;{2fT5EX!8= zp9Snw_i=$Pa+06Pz_nJ-e-_Y*on7D)0znV}0EWY%K`w-V*B0~}jK|};PwC`8X3+Hm zbv&O>_`Z+DVgUd~;Yz!)bu~I&RQG$mUWUJJ^L=y@k~p1CM&YPFC8ab1ec!MBlt57w zMy&7q%~sKMsUef5DIbqVr%xD$B(;&*>-At~qr?7uK@d1UiTc5#(Wrh=qpGUT@n=K% z+l{g@^p)yQgT_W%f$2Pw|1rUIxT>|^?*lLkP2meqM?)#CS7@yO0000G%2?-Sp zFg5%1tnZOY)_(xuNklFj}vce42qu2ld002ovPDHLkV1lad BdaD2c diff --git a/windows/threat-protection/windows-defender-atp/images/atp-file-observed-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-file-observed-icon.png index fbbaf5eb1ae97ced785152d97a7f8ad45522e4f0..943292f0e651a3e729a77f3d34df66f61d1c0886 100644 GIT binary patch delta 495 zcmVmzW2?`Jn z3Nkapxw(-^)_(z?Nkl@EUb7%#H8Y6cwp25xocqlux(Zr4; zm{?ewh!ild+6^qcylCF*-k)rSA;Zl7@9Yk!s>X4wz}qWH5-o~CE$X^%Syj~mfQSIF z*=$JDl*i+Ng{l$+0aaCDj3J65rqd}RLY8GL77O>v3=ts=L#K4m+=lOZ z;QQn8xVLbUBxG6EdS`kge-Zx${tNtJ0e|3qT)@Az{-yf~&6(AAQH_XnM#MYp{ZVf7 zwG;$F&|&cI7WFA{3aYB=W%h{@zi8{9{CqwEC^*Z~ZQCcwo4%W-BEn=c`M4K;a+|{d lj7FnQvUig=6Nh2w{4bX0j9E}KGUEUM002ovPDHLkV1hjV=6L`B delta 270 zcmV+p0rCFS1@!|ViBL{Q4GJ0x0000DNk~Le0000X0000W2nGNE0GzlH%8?--2?-Sp zF)8-$!Qqif)_(xNNklbg zN(rSDRc;qY)FcFx5KKZa38Cu7{Jxfd;k{SI4Q%`IuqXcolMuR)81d=QmUOWbZ}f?t U?EdVe*#H0l07*qoM6N<$g6&Ily#N3J diff --git a/windows/threat-protection/windows-defender-atp/images/atp-logo-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-logo-icon.png new file mode 100644 index 0000000000000000000000000000000000000000..627e9fec3c9134caaedffd7348b4b9bf24b94ffc GIT binary patch literal 1068 zcmeAS@N?(olHy`uVBq!ia0vp^5+KaM1|%Pp+x`GjoCO|{#S9F5M?jcysy3fAP>{XE z)7O>#A(sH3lrbOM>^iWJYeb1-X-P(Y5yQ%LXFPyHJS9LOm(=3qqRfJl%=|nCVNOM5 zpg0#u+&RCXvM4h>ql94%{~0TwC?8m~C^ZqJRG}m@H-L1 z5L@scq?{XUcxG{OP9jig5ySQaTl#^*93bKF#G<^+ymW>G($Cs~V(bw8rA5i93}62@ zzlJGu&d<$F%`0K}c4pdspcorSSx9C{PAbEScbC)|7?{3$x;Tb-bk>G#^xNViV(a|x z$f1nHFRb4<&2H^}W4&VP4}qkmYu|A1xD>f?si3aT6esEH$6Rzw8uOSVbWPmWSkyl> zS7v^pBAoE( z(fQ)4dDl0cJX!C>*^nq<#KKz>X{S@@zldA=ooI0-U`~11MG(J?6 z;Q&L!%aX3APg7IZ#J_Iod;H+xLq-)-qn-JsrJb z`IcTA)~?l^aOBxDwY4r>as+MRc}_U%4$5VHubFL^{bH~)0Rd7L!tTL zg5bHix96UE%5ylt^!dYw5BV8AZ*5!a01QN{*=s5{U7LN*#5XN+*}Tm|WGS zU0q#YmQ%be)9du6DIRZkOf&C$tkG_BzCQG}jb6?Dj16`nbn;&i>#a`xGZnwm8^haUzsnipCrPguONz(mTB zgGtwS_wL{XE z)7O>#A(sFjALEO9+0|en*N76w(vpn)B8HXg&UgTYcuIgmE~&-IMVSR9nfZAP!kmiA zKyfaRxO09%Wl?5&MhU|j{xeoUQ9iI}QEDPcsX|F+ZYqQ6cYaQw3@1n?I6tkVJh3R1 zA-3Q@NI5sy@XX@moJ63~B8Ke;w)6vqIY7eUiA8ytdFc!Xq@T3|#n>VGON)|I8NU8+ zehpLRoS&PUnpeW`?aZ|OKruFuvXIP@oK%Jt?=Gn`FfcZIx;Tb-bgm6`>^o$@BjfI& zaIpEol`rxg{$D(w^2a=6aj$wN9>c|MQ=K5|6m`Ql)I0Fef2~zsf{dOW9LLPk zCyUHU5u5OH`R_R!{pS{MHmt9fdZxmbeOpYaY2SkT4WXjvc5XIo8?3~mK+ulC-bmZo@d5(J?>}_Awl=AJvz4BA94K^(m{UM>S-PitR zbc4lS#YL~P%dh`@AQNILZKEbSxg_(-mgWDm=kGedlxqu5o5oEK%kNq~GbEW$C+N(U z_)%lW?kU5^p0oXSfn5F6Qy!fh-+tFBNPDGC((8KU`^|YBkMzCjdwJ%QmP|;AoTgY6 zdp$x&tohcLs=Y~@Z#uXHh_IIJmfaAyp858&%oVG)a2p(#>u2};RAblfb86F)4i3*p z6*fsbV;mzW2?`Jn z4k6PKJ!6qc)_($~NklqF5=OBqVj*;g%03eE@ zU(+QZNmb?J<0AoZZ*Py|@t6RZBnj{D?nlj&>go#b@9!l=I6prpfYK6?68_0qai1g!z4x^I);_EgUMK9U_x*loF+ z59&hqIcIBYYn8JmFb_+=-$%RMt|YnWu2qZii+cdLySu~j@i9aM+uPf7qmm@~_Cx#X z(|;@S>psfSXf*%qRF$LAhzAD;1VHB;d%a$`XfyyG9v;@xy*%{L`4HFGE z-p1oGMI?+sql;tmE80fp&dyE{Y@;(wH1B+2W}hiJ80*x1;> qU@$1%X|-CFDieM#n_s|BI{zQAue14d9cM}a0000mNklvI&x6~%wIyJuf$B^hDB1`8a?w#qyW3)Y75AP(8l)v4oE4AlJ)g<9z42BF;t3T z2M}CvV1Eu1n4NhGGb4CUa0zIc>lj=#CC>*eFD=t-c}^0mQ^7e#p|9-i_4#sbjjz7^ zieB#-2M3W#`yfJa4)B;L-I>#%f)9eTHUL#wqLM(UDo>w0VgI1dC)YlqJKOw^0FUL@ zVeD)^T)#~vLKx_fWG`pubd-(#3?|)oi z`P#>**2noG^MDgDEwPxuYk!M=OxzSGkw7Ivoj0T1wiK*2^1!BUTZ_P_4Li z_coYuY2`!m!4T7l7LhtZ1n}Y!l(pY~&ZB1=gsPzOEdbgEl^6|-W`L;E^~@NYNUBca zVbs-A^-5(SV(e^fQ9KLtOuqJI@;)SU$6nD#nd2|MVtJ7iwj-ih4)+c)(4L-zZE_W|cU zAq4!P5xmC-pCnTVc<=Gvjjy}CJ$45}?%chH8Jt__GIOf)3J}L0t1-8*!1C44*!ts5 z%A(@t?|ussp&=M0dD=4&C^5tWgrr8q`?05S-H&DZodxDxWcAt==6~k96Qw@|;gl%_ zD%$gJb9Ln$zx??x=(bORR7o0Tp+j>H+@F$>E9U+1dV0NE)moPd@O0r%>x1F z9aSAoWmRBx<_9${Eq|Wp#%I4`W$7ohT;kNUZsqZ1G*k54XdBgd^`Kw!;K8?SZ``LS zg+acP9ES`S8VJUzZnsVnPZ38iIC0`t;oSMRxxDxuGpA;bJk3R|v*YMN9wRo#Wfe$@ zcF-@_={?8HC}LH=Bnmi(A!LooTa}p`0~&W8GiFcE)QL8U$xBz+G2mXd7;D96GJbgN zVf<&UobcnKC1Z421I)ay<^3B3_a@BD5HoNmdzb&ef_q*2QU43<-yOsd0)Zezg#Z8m M07*qoM6N<$f(LvYEC2ui diff --git a/windows/threat-protection/windows-defender-atp/images/atp-module-load-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-module-load-icon.png index a759f569037e04c7ef61348fc1f32679fb3cde02..6f8ce9d6fd86bce392b171fb3d380139a16eeacb 100644 GIT binary patch delta 717 zcmV;;0y6#o1+WJpiBL{Q4GJ0x0000DNk~Le0000O0000O2nGNE0N{5$_>mzW2?`Jn z4I4f%w-S*_)_($fNklaDz$vcvj%=pf^pE+|q${0hX6kL#mJ167j{4qF_ z1!Y-cGMOL<0!tDE0ir0v$HxZ%w45FV{zXv~1V8|c6A(-Dy3Kyg_zM8!&89I z&rg!%e!nLGDy3?_0Jz)jNRncEiX)82WBR^t$pG;7_LgxR+p$uL!{LxY5S*TYOALTz zS@P@aizKPFt~mj~s;W+NptZIcJUl$u7ZPcbBm_X;_o=l$iJTzF0QVwYze|JY()@;p)FGwhBk{dO_?N#&9ltat$F53 zwyPD>Y0>BB=KuiT_ggly{^H^S0C0JE3D5ITbI=9X>D${I0ARgdw}@r@`uYk0*lac^ z%YX8RTpdVXYBs-{o10cy-{0R`=jK-jLgMx$A&H`hd7iT<3O+tQ*2ry#K89SNwWcwK zlgXs>3>eo%~Qp$F_wU+>SmdhoSQdle&_MI&J zFB}dB+Y+RFNs`n)t0bw&W3LDQ&aQc_5f<7%-?kG39#G>~00000NkvXXu0mjfadt>* delta 538 zcmV+#0_FX%2mb{jiBL{Q4GJ0x0000DNk~Le0000X0000Y2nGNE0MT%;!I2>!2?-Sp zH7*S1kw%e8)_(!YNkl^pv7WQe?bt`u`J8T zG|f6@ntvu`S=PEI-nZNBwvFuddc}A=#_@Q>{eH)MKF8zn!0B{?@B3ITm)PxgSg+S0 zBKW?K+wBHPk}#c4zs)@&`v0eu5CZ%C9sqDS9KOV=?b&QL&@}DaJgv`(XK0!RUDuz+ zs_`a)&JschTrQWVv1(ih(J0dS?$C7|MNz=>JY(c}jy%udc^-Ko-=*r)EPy8fmzW2?`Jn z4;u^y)sT@%)_($pNkl z3Jpk*8V5SN4NXvz4yTJdpI2Bjj&;Ao^uWvcya=FCJcz%BVu(Gc(9*^1E+ka!ZT>AAbm+|!U6o9L%D}Wz$ zaeaM_B=-0BF|#I#B&BI8Kqn_B`U&c~_TwN31Sm~YNfK3636Pm-KA(HXi;D|AK0baK zJj*ggQREZN=W`#gswy!WjRYu;W4~xP912i#6rZEh=?KtpIP|tSj=haA3RQpE^IT@8!Ck)?G#@x}-(T>2n-EN};Gk+t?GC$#*%CZFB1(&8Ni^YP)VnLdw z8*{VS%>Q?`r>CbTfh6w$aD03W!0YQP0PS|0IF5Z+uCq9fX}8+|Os7-7))hFNPMfjY zE5{7S05jVVP@1L+foY;~i@lLDN>dW8`>%wz1KR-Wj zl1Ysk%}jtsqtV9R{|&ac#>_OE%_OPO!NI`+_xJYz+}_@P`>J;ScXxLHJUl#jwr$*I zMNxda`t=SZ`76ZPHl9rV<8!$UN$-!o3m~pv`p9tc{%Z#Se*jkT903B;;c)-}002ov JPDHLkV1iWfSc(7u delta 451 zcmV;!0X+V?2dD)hiBL{Q4GJ0x0000DNk~Le0000X0000X2nGNE09WL~Z;>G%2?-Sp zHw$&tCxekm)_(zWNklZq}7)BpeHfN2L9hf6US>XUl=5PUy!HmRF$N{pm z2P7s$1Q%cqvpYogP^H3cY16@PL;55?et)*?NGT<+#d&+N0034(VI>q+LSZEo#u8Ok zQB~FKSpcK~!!XFh;UL?#HHqu|FbpPfGl?WgWS-}Gfq$|rpXSQ4)C=c%E|VmgM?(FT zB93EO6vfkQQ4}(cWBqM7jpbJde7r0T4pa_x;Z${(?yf*L4}k5qSJ% z*L48w_kVi;j>jVar_%{|Olz~*05FatuIo-)nAA6lqHh&5ilTXn3E=y_-t#m~SuU4P zbL;h*G);j=M||IBwOY+H33W_AyB|K%w(XZLD@RJRhpswy+wFETd%NAZ-|t3Qz%iEi tMeJ)^V}ND1e^vTiBL{Q4GJ0x0000DNk~Le0000O0000O2nGNE0N{5$_>mzW2?`Jn z5FIE#emjv#)_(!#Nkl{}#-3HnF)HHsYV9EzPolclcCdjhvs{l5^=C|?{ z^L#!709LCNwAQ#>ECH^3+G8%Pmh9LGWD&6+W$RiK(&`Ob1t6rH{GdX4>l z-z(^+V#8)-Tb}1Fa{xRX4ndW^^;Q8rH#W;Mq-hEONYfN$SzJ_;t3IbrB=RHQDaXcP7Y8w2Ho%cq`Y&Jt#mVbz%s9m2Ja{564 delta 307 zcmbQkHj72EGr-TCmrII^fq{Y7)59eQNGpOc2OE$Ke{v{)qM|$}rznr5^1VlkzEAYL zR?qO%)5S3)qV?^y{k$y-BF8_@7x#`9-&n#TzTxP#Jza)6Ywj`lB+fZ7$yMgi>K!wz zg$4f?9Q_?8=3=L$sB(IfLfOk#mThW`4dE@F^+GM)0(y=+{xMB_$D5EQk=&#n;MLf1 zPO&C_i>PsR?`J2VP`I;ZDet3qQ!VxwuH8E0dCgCQ7ePl%d^2XTUAtAmq2zRX+l8oV z{qJ#c)sJ?sS~Ve6a?3UO8;?5@B`%c4erU7pO-So`+_CR{pvcio2Z2R8-d9R{ZO)tf zU!HK)vL~Y6R?zml^*cMm$ycYw=iR<240F&&ww+JCA5U$Y>IMu422WQ%mvv4FO#o{E Bfhzz2 diff --git a/windows/threat-protection/windows-defender-atp/images/atp-process-event-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-process-event-icon.png index a91aa7ed3e60d56a0aebd1dd9e42c3498e561942..ebcdefc909f3f686412baf4c8512a7e14f45cc28 100644 GIT binary patch delta 862 zcmV-k1EKtY2fzp+iBL{Q4GJ0x0000DNk~Le0000O0000O2nGNE0N{5$_>mzW2?`Jn z5e!?DZ-|je)_(&FNklNK_9s*2EtR=Cqlzjl$ z(zt9bn^=jZs2vs>ms042itiSCXYR}{H}{@o!f=N3_nnUe==+{SQkErs-zNY9U=&4E z&qh(C^+6D@EXzS3Bnf4tu5H_DV-eAN0IaHtbzNIJbAPpMyBlCI>Tl;slCW)Cow4h> zbX}Js!ke2Lc3sCbO?80(s(_@1#w^{;R7AARdcD?A4arDE@csRbx3@QRT?djlK0XEj z+36;rr8*hQ~uR-s3wJBNRn)thWGdPtm|4k zd47JT=XpB#csypF=T?v`%d|}xh6KPQNeC6~<>h5C!`}}Lt|UnYZOXDVpZjBwWtoL_ zRaH9cySqE>Aj>jsvtF+)8}kgnrUyX~Xxu%|(|?W>|D!0fob-Lq`Fu_QoXuuh@B6;? zEy5?waZx7ek*LZwjTu%W)jOzrXL` zDSsmT`T5b%bzQg9H`O!8aVR1b5e7j(D9q;bxy5<4pG+n?NEAiZBy}8TkVWQvLJ$Ny znW$|0zGvIE)*Gsp>$=wTH1}DS{i#54Rz$d5F10iD;+f^=dCok~Syh#FW=`8QO*NCs zvfNBl1;h5*4l*QW56z|E8;J|X_}&{ zDlC^vxUP$J^OH-}gQ9Jhxs(rB`;=XGkd()fCo6QS3la z6ou}M3CZ^K#kSJqxaxz+d2`m7X8ZLHivs}&)YHZ}^v7Ge-B6}N~WslO`@C7yS#dk`dtuN>aIdA#|)Z)Q(K zge~I7HV@w!*csRv_`U{A(mbr_2x{-0s$^BFV|{slt8gq1mN}cmDy}YGMW4%FA|AR zE|=-|`+xZTer(%zHGsHaGMR{`X)EjPc3aZvw1h$-NvG4&ZnsxBnx@HQGFhwdT7=zh z7l3NDx>$1@hio>>?d>hCR*Q#+2eR2Lj^ivi^NyJB|K|keDJZ3+P$-CqNU2nkmzS3% zj$s&5DwRY;q);e`Qc8Ngo~!moZTSBF?#lW2_h<~( z=ktAAmbJwB8@67A8_j`CCIi5DJZ3hVVHgHSM@K6>$8mUidgAc#5Wn9K!1MF-TJ8N@ zE|+sNaB^~jh;Vmz$8>23L5NW#RMrczk?BM7X)R;rRG?y|~*I{EpAnZ5W1x zLS>;vNA!9kv< zQWq$t7IVN0HY&oe#P|FW?F{@^1`dF|Z5r5m0zUy@wP3LyBrA#l0000mzW2?`Jn z5h)OmyU&qH)_(!NNklgzV5sOTlihAd5g`DkX&Ssc z!G{u&=<|BL1^{$j2a*sGY`0saY1)5xIH2FuS(f?K?tgO6BGSV(%D~m(aOjCErAU(d z{oeN+u8)Xfb-UeqxK5`N0HAGK-}ku2pdrbkD0+CFQ3bs*Xv(sDi{-I@JRaFJ&2WQ9 zaS@63@qa&bUFT;#XdhHn6(DGuhDA{XcmS|z8bAJ{!K1j=no23=c}`=DH&aT{TFbhw zc|M}7tJR8^%Ow#13lkwphl>x4`3>(#{R1pmL9oiw RJ0<`C002ovPDHLkV1jmN?l%Ac delta 669 zcmV;O0%HC21%U@4iBL{Q4GJ0x0000DNk~Le0000X0000W2nGNE0GzlH%8?--2?-Jp z0~RuAK24EH)_(#_Nkl?)ArD*N}{frZ`BikSzf_Nn;_Kp698P+;oV7=IIm)f|$Dm1<7asK78Ki z{lV)ZNjx*ca|-}niT`vZnsg;x1jz~TYsLBIxQhd5^8^H$Y!$;1OcH> zp{J9$zP?7GSiq2b2#rPqmStgSX$fo);c)orB({r1=%=S}%WmXzc@&BTq%&!d#KgqJ zgR>nw6IWMP5Cj1?H#ZPO0k8Y|(EF+vmSrKcm_fN*esH!UP3XFgR5}HhAYgN26S;g2 zpTB;AB!5a+%q+q*O~|tRZ~)uHFbu}xF^+gfSgBS>l8Houo_8JwKL%N^*B{MjtBI47 z6Qna~TwY$n@ApFzC8W|R?El`!Y+@FsX+jjm$Ag?UpzAtg@fe5S4s&H?g_@>uZf=e~ zpN~7+J0!`wyStXMT%`R^&C$^jk_$-~hJoORAb-Zj#&G!e5b94A%gf7%L?ZSA?KW_H ze9Y5bY6YvStC*aev>WAYJI>F~8H>m0^?B(Z^;1z4?(OY4 zZf2lK%UAT`;sW!@d7K$%So^jHS(ee$(*v*9>%0LwO=z0NXf(=DD8z$AR0|Nu?ulyd4-ic20GQW3D=t?x{N;LTgpBi8mzW2?`Jn z5)=KgF}{&W)_($YNklK(pC2rXV7m zPA9b6ZIntSlu9KirLb5mEE@o@df<5;SJCNocn*NJ+bw6MwdQqK6qCusssOSyc~Fk= zcx)Y-PJgGox7+RLa=FlOIOKqr%Y~B$WgrYgc5pZxQu{_-Q50F+n~L}QJ+I{~zV4{i zY5)M=_famF;lkLT&u0MO-mTYb-d9Qi0CHxMBuQ#h9+u8qtrh^F(P$u!WBmO5AP53J z_ww>$Ws|xvMzXFnrJdp1G}-*l=W|Q0IS7~xTz|^$YU65@QqWqX)9J8ny2HUN@Sq7w>JQQ)*AVI9=F>Kg+c+h+YR}A9+gUkgD#g#6pO{QA6dG=X0zdvy(BzM#4)RLa0!(9JIR6GJV`Fg#w!(OjPT5Eo)0nltV`xiyr1L;g=xLU19 zDMj^q{a*ocS+vP}aXz0xM5tD)Dc;@r!ydR41wlZ^qI`4dG+l335QJB(ES s(qIlCl@vvhb$f##;BT&rXM+6#gNcw%1rKVarvLx|07*qoM6N<$f(*z<)c^nh delta 453 zcmV;$0XqJv2dV`jiBL{Q4GJ0x0000DNk~Le0000X0000W2nGNE0GzlH%8?--2?-Sp zJ0_gIH2RTA)_(zYNklj-iZUI0;r05l50k4NFaU~nkl0kC}l zGzJIN1&L@-Bj5?9k_Wh}x(P|!r9XicJxR@N)1KTr^K~o{;nRG5S^(fXrv9$>Sny9e zQA&iA5+SK1f*@eETG48?7!HRVkHUYm^Z8tiG2(fibUGa|#>BlU1QAIm5i*%f#PhtwTGTUf5~-{*e6bGck{3qTp$871;$K_Y1qGby$+ vf{0|>q6Jc(wx1{^LQ08{xUjO`De(hS2i74^{tgr$00000NkvXXu0mjfMkmN& diff --git a/windows/threat-protection/windows-defender-atp/images/atp-registry-event-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-registry-event-icon.png index e0da4d10100f6b3dc850998855af21102238dfc6..29217a723539a18ea3ad2e104c121b91fe713a4b 100644 GIT binary patch delta 738 zcmV<80v-LA1jPp-iBL{Q4GJ0x0000DNk~Le0000O0000O2nGNE0N{5$_>mzW2?`Jn z698ZoK_QVz)_($!NklnPj`#%H)4>by z0K{6zZfq7iwe<;TG(iHD^WDNb!^|>^H}@o)**){kneY5ANYWU?|B;W64+0pqY>bpn}f+@;@-8^ zT&-5lxDAUnPI8k20DOOck9rWp*h`wtCdcD3MSp}M!tr<<5UY@cQVIZYe}9i8NnB2B z%tZuGPfreWdU}c^Nswh3(lkYuWe&SsF7f&KiGza!mpE5N#irV&EAIK0r5Bx+VjFTCIj8NkGyy<6^N0s;yS5q1|pnL{P0(gVJ+V^z!mjT19@Pl}+Db zKYx+@>4RAP(;IwN@8^U&2BW{Hwov~lWz8re!JhJ&`*Dx4@r7RJ+tnY2Rj422)Llq|ypEWuH007kGXk6;hrnq`=So?fYv zBZ&bM;Cz?U>nz#Q=hIIiA^;%Bq+71U3ZMWAa0vi2gPHRH%oFc{C{i||_Z}gHsE>#+ zjw1lTTKfj@Jg-VbARBVdiE}P$uj^WjF<(AoOw|6V!+9kr%QE^?Yb}OhK;QSP?+*h^ z(-f^aGoz|1v~7DWK+`m@g!AM;S`VBu1@q?H)qpr*3YJ7f=(=w6-u*~G?>zu4+Eesj zt5^YkQF0T85EdsPW+$SgxJhGprLvbm0Te(16yO0LO~g9l+O2B<0000 C`*)lG diff --git a/windows/threat-protection/windows-defender-atp/images/atp-respond-action-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-respond-action-icon.png index 0a6b3da6d4cb4a60cfb28d3d6fa877cd957b66ee..21c8a9e19dae88ebaf05412f150ffdf2cdc670b9 100644 GIT binary patch delta 618 zcmV-w0+s!l2hRo}iBL{Q4GJ0x0000DNk~Le0000O0000O2nGNE0N{5$_>mzW2?`Jn z6Chi9Vd;@c*MAyGL_t(YiJew4uJSMp{t_xc2qCc|#+J^UpsB<$xDq3rgN+S(g~HgD zkrBjzT0n~bDS2s{!h64^D#Ui|&yMZDh=|}IA_8N~CHgfH5x9#9KpU4**7)|?W>^9A zHk%DbqmdRe#-A8U zr9KyiVZ({i-DPZ-@JGmG_`%p<&yF|Cjb=3 zF%c0Rk4FMPj4|h#%jH7r^;+*em5NWT4*=8Y6lt1bKA(TopG+noBAm}>tX3=F+t5nW zw1GB`V=BwCb@-XTbp-a>_BIG1u;1^U74xT2;p&4Zif}j_8l`Ne(%y5sW7{Z-A|y%D za5L_Dpv;xK-c;L}5JDq&0kI>f$)uF@?eB?e&i|JF0U2yYEpP?{EC2ui07*qoM6N<$ Eg4?1Y>Hq)$ delta 692 zcmV;l0!#hR2AKyTiBL{Q4GJ0x0000DNk~Le0000W0000W2nGNE0CReJ^pPPS2?-Sq z0VmJWup*I3*MDS5L_t(oh3%KWOIuMC$3OR_%1aPMiw#%@U(>;*siTQmvsql+?BZA_ zai~9|tCmxSC2XK6R%*6W% zwALu4s`dmyq3T5bbxs7WHB%p^n3aKOpQ3E6D6Q8*$(XJ= zZEZCS4}XGy;Eo;&H3jYM?UYI-T+d~Ddpk^u8#Vj{^&}!hqfu1%`%($bHSRwzhT?b6L7< zXj*lf@Y==l`8=zus{|5YjKOgn-i?kDu_D;E&Hnd&R+d))IQ@0X#l;0)&La|u(B0il z@n;cZO!ELe&wH4hoJ5!P%`68&K>y2rEGvTV`|Nz%VRv_zSS&_5ohJDSe( azk%QWFIorR5*OD10000mzW2?`Jn z6bK=XU(}IF)_(%LNkl1s(s<_-hh2ONhx1F3obg#?@B=538egMPn{h){7! zthJ>H%72RH(Q35{?}H$~T1(|O6qMOlR#rGWJM)x^2un*#JU%{haB#r-`no@zs;Wj& zq#~ltW;3G#Yi;TCG(0^$DWLUwT~$?m2dk^Ae0+RRtJRoHCIHOM%}t%nG#Xv3^EIx; z+1Xj5C_+S-pPy%8VF3~Gvim7{`n{W__jj#zI)5F1aq{b;)9L)0qQPLGBBC1`8>(OW z_qQ0(ZnvxB@mR;>v39#%Uu-xWPMt-PB;M|FWeS{}oG75}cDrz*cDt>{7~jRe;Kbqz z7=Y8$Qvh~$cKpB`c6WEN))L2Y;oY=Br+o~-_VzXa@9*ygwYym~y^`nDTFcSV zQ6adD^Rl&`epXc~^$n}y*+_VXpJI=A-!0I8sUoQi4bR{#J2 M07*qoM6N<$f>x<_d;kCd delta 436 zcmV;l0Zabz2bu*TiBL{Q4GJ0x0000DNk~Le0000X0000W2nGNE0GzlH%8?--2?-Sq z0yp_c^M#Q~)_(zINklRh84?yNI zU}z>I)n?YbS6t_~nS8vd&E$0*%ESQp7$|s!Q9?0FC??HQ zAdX{_B&nUV*=#tSPQSB|QX(6OqDV$jR6D*}t>ocwXn%UucaTzccN{_p0FK9F>$RQc zggTD4B3e12Ly{zwyqVAE?DzZrB!VCy2!i)>9LGGLPwn+u61&}w*=*L{P7|%1xZQ5J zuFG<{#C2V=EbCXIEK9;L#P@wJmkYk{b3UIb%d$U-qA0L!8^>_~a2yBQwke9DKZ!nQ zl&~y|JblmKd5~opd7figR%a58Ux#U$tk-M8Fy!%gFr7{jLSUL^e-a8I1dGLj>-E}M z@YWJvtD)z4ok|$5Zo9V8P16*B?RNXVzu)h*zjx2`DpmBS_}UVG$k=UH7$p>=ghCZ7 eV@QdAu@j#m(cdtQy^GKQ0000mzW2?`Jn z1QX#YglUmU*MIOyL_t(YiB*#denw9ZsSBB2A+Qf2HED`0?n!5}4q6hWZeq)G+3LlPirKp-UKa&khFbNjxx zKThJ*{bTR7*X()M`m@*b8c6~HrtA2A>|(G282|@^2Y+0U?TP_#yPjKQTnqv{iCkQ9 zd1P@7n1nRAP~T9`+iTvXqN0M}l_nxioFt!@xZ@(%;P?5+xi*{WGahEz{ZmO#OGjPJ z39z_;#mJRp5@{E(u3`O#3g*u*MNXV44^Cz5`0?Zyk02vC6|bN!)I`nE6YSZ$hmR^Y zGH}p9UVmNu8l!Ky35-oN34lP79J%UV^GoMxXkLM4&HBBLojt9VXiTw&Mm7F-zbhavlSQ~(8512 z*5!_?()o+3Ua&~JC*P}0#W$*cy%&7i$-7<1;l#P01|SiN#JW5$lfU_g#^xvow{!-s3;v(G9NjjH9-ecCu; zlz-kdXr;0G2R^OOFV>k|J5_t=kg7Ip)}^|OI{D#xtw|lAO{2yrdiJy~H8ttpDfjB` zNfQ-`#N^14l@)KTT8Y>1<2SROA+@2A122_wq4F@P>P518VoeHJlkX;Ncp){f{gsBT zn=sZ-wB{V~_7Js)_j6>?Vg@87^YpCesei7lX4@xQu~=**9N~la*D~#qpOHIwFsIAP zIKOWvX-dNS{KUCRT5*7Z(;lR0$1ZBh-ytPu5N(IQq~@)6h|-P^L(S?9T-dmQQKN6< zjtO^Cwt5wg>td^_tLW$qGj{wB>Dkc8rG5XwV6pydaN;41=}G2Y6YvchNbMV|=zl-@ zRwgliuP4&f0SMQPU`VI$gxg6Ol*{?@53x3l(Eh`m zomWcx)iyFF+)2D8Na*te#4Uu|I-s?I9@nH1cEhx_wqc!EEHQT^j6?SaCuZ8oxOpV~ zr%b`uCxiUy(8LqFdSNm38!9;dhZkr%auA>E0Y#DH!3($!V1Fz&tyenn za11$ylmS`zGkV|{uy}~OQ9@sQN%OYtq>LLwa%NxpJ@6w&maU|{s){pn|H#!-r|^&l zIQTO&F}>0Wc68uRP9in62X<(FfR1pOOIPZ+rl^qgf!R2MWN$y(51pmDh{xK9nI_`KCG)o1@TMlwchW>!D^E~eQcCE=Av{XM_DCb5CVG%W*6rhH zmgUpk`xta>9=-bX!=@zn*BXT|{fuVf-c&k2QoN^|aDS{@4kODw#uz z^|0)Xr3}c;=BM}E1Ao}WxOQEsY(<%d3>l&&e_JY7Qr+f{wdJ-u^v|IqwRU*1-lLC} zdQh3MDl=#W9=(lUdnVnZ_Ad@96p!h}7v?As7^^eqNqR=Dw`T+FEtEjv{pz)$qx7om*3`i)%knG%2?7TJ z1PcVGf8~)$*MD?Tx?wkM;92_i%4jqz-i3z`neA)5i$7R*3RRYM#lP8x4 zaq!?l0VFv&S$cYUy!u9N^vI`GzmpHMe<**A-zat8(#iYZHpqur1=3gX8?kp>_lmbz zEUKDiWo3auoIQJ10NK8MyEvUr)&HfUU3G2QvW2d$ zF6!&+DK0La3!M*a_hZWTTeBRv3gWvxNfOYHEQB_ri)oSI$i4zNz*sx&(PoF-ezrUZ* z&`>69cAAp2m>K`VuL=OYg|Df;&38H(ZGZhlh49#qKJ6gF@B#n^g8{46%IN4QD^{#< zD{C1%5q$NcNpvHR()%>W+pEtJx?rlFiJ6nDD5CEIaMq1k347ay;`Gr_a1%Rxs zCa>5j`v|vw`U?Pt+y1Wl*RNlX*=%NZc9xLY*;yP82RfZj4VbXm7X_HVBIf(Pxc!-W zAG|V*i0lj|hZG)G{B|y{GOV^e^?wvaAw*FW!2Q+p6PV_n_q{mSR!*x2wklS2x( zihjw2bx@6yXU~`zcCa!=tJYH#g50SMDY`-ITH_9|cg+sX>fDpo!hN7U9FW`CSxfdj;7 z2?`EY6#(}e2m$x|85$Z=gSFq!WbD@61xY?DJD|2bt6|{G`G5cbw41Zk_R!D}k&%&v zg@w77XkK0(_wL=}{{8y^#1?MznPk4L*_Mm)?)w1)%+Kp|I=Oc38u|J8z}NePXY=r^ zTV25`Xt!)yG+FXn)y%ra8GrfUa8v9YlLwB^6b z@W-8idj+Ild56$7kv{hUU$#2!J8Zx09zQiTMMg#j{r&w63=E*rXn=X=34rSAY8(y+ zB_$=QZ|k*2(vDODFkv0!A89|JU7w2irGg~^lHdH53II@2Qo`N4cR6W z@A0Ju=_)Rj_tqwP6@D*jgLM9+L@aM#@`|6Dnv$ZTBK7d>%NG6bIDGi90Fs!PC^a=T zK4ZR`o|dQ90r_fj(r14|LxUI$1_7kJynL}zi$jQrT)1#SVt-;{1dzpU?r5xriIPN&0e zw_~%}7#J9!rKLq3yMOSg%Ir1I=0000mzW2?`Jn z76cj&aea|V)_(%DNklXXnklnOTEdB+D{(yIm@!2*CS{ z$K!3sji4+`N3mQk83cjjNNdf(V8GF6#D2d|01j{*$AA3%{PY5-Fbug`t?=~pgeZyt z07@y41OUwEa~vETfTYo{*K6F|+~EBD9JXk!aeRD?{r!FH?(X93>f7=~euI`PB*Q4#=?B;m`;3-dhpIO20#n2+%W5^5PNxLG zlarI5B1=JRV|hnWWE@^zUK&83bCR6RW>iYC)qiTaUF0*C^e-S_xEnowA*b5u`2ep(d+fh_hPZA+2(m}GM&%o z-xNJQKAJ-^WI~PYe6?D!EK3fDLo=;Xc#+X)L;!3w8b*ga&yADo>ua-76oqm0_V!k* z34Z_vLEyE&ySw`VAj$D~Y(So$pUq~ProVQJEv;6o#)JVNNv(CQ1$~ZvVpCZKHva>m z>bD{CfeBsGC{-KS2h%ilu3RbNw)v=bm@g1im5ar~8LEee2WP)5ORm>zN_zufzu(_V zAAHIz%S=s_QoOplVo?+<%aTcwI6s%+a8Jn1W>X8IMv*+W*n_2%Vz=9M)-p^!8fySm zBl(uQ#ddsgaq;VY^e07C$@84OUXNO9PN&n_zAr$LFQn`9i;sM=(EtDd07*qoM6N<$ Eg5h;%+W-In delta 546 zcmV+-0^R-T2ZshBiBL{Q4GJ0x0000DNk~Le0000Y0000Y2nGNE06Iqt!jT~#2?-Sq z1SZ9zbn%f%)_(!gNklbT4qwj98TcZJci`7g3sk&~$nS>O zkF3?(ROBO4=WRrqHft+(yB#*04T_=w02qdW*=&aKcz@g}-&ezd_ONRXhXe9F$9})Z z`Fy^4aV6I4^)MQZVB0n<%X+QIdcDT?_cw;aAq>NS>$;dur;Q1tC_qIQe zf@zwFqUaKPsT_`ZJ=1OB$LX`1cN5|Z_+kt9hdgy89PBFW4Bn(Hwk1d}9rlWR_)@Se9j!QZfjF zrzJXzkYpUk6hcsIO|3PB5RBuvlLSdV_4Tb&mL*oJ6#!tlT%zCax1D;&KZ(4OxA{Z+ kh}8Lr)cJ_i`H0l{16dC5G>Zb?I{*Lx07*qoM6N<$f*Q8|;{X5v diff --git a/windows/threat-protection/windows-defender-atp/images/atp-windows-defender-av-events-icon.png b/windows/threat-protection/windows-defender-atp/images/atp-windows-defender-av-events-icon.png index c6d0cbc6e45cf3662fd1788fe23debe595ecf220..6344860c5e71af3abce062c66a915cfc603a9f04 100644 GIT binary patch delta 423 zcmV;Y0a*U31&#$FiBL{Q4GJ0x0000DNk~Le0000Q0000Q2nGNE0I5n$&XFM>2?`Jm zHY~V#Lwu1**MC__L_t(YiQUvcZo)7ahvAp18_wtx5V0a5vBAh-HU`-EH*$o zfQXSRWPpj)VnysAa)@+lifZB-P+FDW_}R&0J6~K%(-a`3;Jg(Lye{K|Hk%Er)r#}^43I%uYqZwHaeqv=+ojX#SfSGQu3N9y#Bt2& zbjn_So$+`KKomvBnD6^|o_BMn#*QwR3tDUI>hf|t9)Yi2U+49@t`MkPF8>ZxsZ@-b z(RD?|=(;3HP)g-KU~6vxAq3m))~FjtC#9s>Y&x#fOsmzpS-<&>hQr}Qh!BFoVBikb z>vej)-f-Q}Xf&c)t-3=1K@i~kzB8hfVltWJj$7M13_~YODaCv~x6ZLbQcA)wv^Iwe z@+0(#Efx!=(hMvj)zP#auK$r R-VOi&002ovPDHLkV1jnS#ghO4 delta 452 zcmV;#0XzPV1*!!hiBL{Q4GJ0x0000DNk~Le0000W0000W2nGNE0CReJ^pPPS2?-Sq z1s9EHMT(J0*MD_ML_t(oh3%I;Zo)tiMjuf+mU2&kMT>+)2PMVQQ9#FE?E}!m1(19I z5G7Y|fh)HwT0{@RhaeSBq}a`o@%q%5QZVmW)pzp@kp=NV>BAQ4j_sm4u6LOyWNiK^$HLJXsyv&oI1aU1Ev+)~Ibf{7?RG+hnWGU(GZVzIz+9BXr>6!ZDq zYOVDcdY)$mp_F2^TG?)E4Y;tfRr00006p7M}=7iBL{Q4GJ0x0000DNk~Le0000O0000O2nGNE0N{5$_y7O^32;bR za{vGi!~g&e!~vBn4jTXf00(qQO+^Rc3J?wm1-VFmG?7Wxe*)@BL_t(YiIr8oPV-6- zJriB=BSe{ZK>`W;Ik5c@gjWbJ0Dgj$G^QjmKMgo#;?kjmv^E8@-LU5tu!9%pyB~L? zk=L_3XJ&W)ge37rBq1XD&GQ^}UE|>3007W54MYUn+uINk%;$3e(EXqKR_Ks1h9tRK ztq6bs7{@Vvf8VEw5CDDO=jG+4?ms_2tDgN@f)&2Kz47AWf_Ha!x*3L{f>^djEQevp zx~@r*X__*QW0qy9hV%xD#X^-G559mr&tp|pEX&d{-1XS=JOW^rWqKP$TP~LhWT|Ny z1!|f`!J4K~XWF(^x#xKl5iXZY#rVetcz1UfB7%p9e+MhV&d!dmZ*Fez{{9Y<*x%oW z&5fFFuUvgCTbCIAiwgI+AU0j}$sqtVE@ZSRRlGD(tN z5bb{yMNE=}*Voq@gKs%Wl71F-X+EDjz@F!^EX$wASeB&*)v^t)W8mZC!x0!`==;8= z;NK_+e*%h#lN{a5(mJTB%6Ufs8$JI?-Pl>Ds;c^~17nOH>T(>%J&%kr8!I-B<6i9A zwk1gpL2&&OKt%BJ@&b|=4u@Jm|HnYrq2X`{e*k!Wef=~5d{?P` i*Xy-2M!ULJ{x2U8M91e1aykG2002ov22Mn-LSTZo#DPix delta 2641 zcmV-X3a<5^2#Xd;iBL{Q4GJ0x0000DNk~Le0000X0000Y2nGNE0MT%;!2kdN32;bR za{vG#)c^n?)d2*Yw4DF|00(qQO+^Rc2^9?nFatoNB9Tefe+kw}L_t(og?*QMj2-29 z#((ek&CEH+Yvaq>PO)oj&x!idpYOKnVIi<`p2BLcWu<~ zpL1q3^UiyFf1dYwO_CsT;Wz*!QQvpG(-C&z!U9G>5+(y2<{U&j|D4>sJunPgU^iK0 zSONl)QB@U5k^t7f4`zlL6up2?JrbA+ED}SB6li2ELRH~#fI}pp+P0a)7CJv4!@^9= zf2=;9q9`#l(lkK==Rg8QkU?37^G-BU10q$3IOi~df6Ry>sqH$|_i>o9$d%+m2_j|- zqXzH&`RHQ|NRAMMnGvJWXv}8=iqOGKnDZ1>NtUEUBC?3|PVrxo3Ai{LA&403bk`rP za2}jxm>HN6WBq)HC24AasH%V^9#ibsJpnneI>>o;qxTZ@Q^8a_DZ>-nrku?%RC=dbfjjD=dNs|x* zF@jGTb#Hi2j1Xeoz|PkJ5UpSEh;!iZnE6Fc^zlglCjdf<^m;w8NLdzj_p8VL1N->W zm;Qz~4h=Cid5R~Ve4H=lIx3y0bl&FJHwk@4Sx5={c_dz%H^z zg2l4VgiGrZm|=)_Jd&gk6+T7 ze{}8pHt4tRxl==L9?@Kp>&d6~>c;DL>W({h>+str)KO4Toz*k@zN5Q8d5`|}yN~N! z*;S{?B?ZMQD8{Jy;{as+`T;~i41^*lNgYL15zHe?a4zM{sR@YUQ}=$FbysX8NfLJ5 z_yIn8$8L_jIl|PrGZe8$R7tlpM^TlOe?eqPv)}BOCL)=yfefweOrl?f1aFT zaLsC(jg*<`v$Q8Cc$P;&*|GweP5ILoI0VSqSscax;is8u7BF|Ro%GjS~Ulp-v6t+^!0B& zro-pjIuoV2Tnfbk5G*)IQWblu)KOHoMo86>;-o@%RO-H^mwxbsKKP;Ae{}cn-lrcO zJfhhsbycbty9%LHS@u+vZS{I*_4E^u>DF7W*C&7fGkR_OgicDDkW@se=t-SUz6cqT z?L)Esu8z&V#37 z{n|lhXJ&ZnzxOkKW`Y<3f2&rmqM5XC4zer(W6?-=^IR1}->6k|dR>0{`a!<-&_g`@ z$fG>F?*N-Oy@&T~`vn?_N3lQ(c=H$@VT4%E`qq*rAH4Y{2A2=;_+yW<=fS_{(T5*m z?Bq#;hpG>Og|wB_P8i-CF;<&{L-})YOrP7e^$~o1&M}Fi7GLS zIIlCT&Y?9k1_xKN`RCW+h-|xZ11~67a>`zhs@KJH$q?-`hJ;i%SCTZ?f4X%GfAQyk#Ol>+dGWdD znVZc~=_m_93eBePqoZyy=M0l067UG;pbU|`gvP*X?*8~Es1Wboya5*>^T{G*<)9WK zBE>NPN?E^tJ=bjCz}(DR{O8{9aeQ=~>2n3%EujpNcHW^Eazd<74Cf7bMG^vKx5Mel zX?{9ajwK-$;{bv?0fnd zysOx~`!{et5rNp3W61EXL5wi4^fKn@fpZSpSDhanoD`_#Sc{>bf&ogCpS zU;iepRa^M%?|q()YnMY+&`h&hrMruqsQF8EJ|dtb+I%G`5r@vp zfBj^^Drk~a3;j^<268nEmKByY==LhoW`a>6<%BXPbw>1tvy5KlD58;MEh>R80t1;R zggMMP@{r<^l%~}Rt_%U^9ErKbPE`HzZ3H}4Z(zYA^QgZBn+wEHkoW{uIhGh97?B2Y z2~|I`CVd_VIrtPgPo4)FnGr)tlt{DYf2CvvRe$k`#Qp|`_o!Yu``fsY_!cUKSp$^d zT?)}^4j|%G*2ZH1%b*gmf>y(0f+R`EvW&9G7oo!>DN+y!IO;iO=0P5C$mSokn#9ht zUDYpYf(+#9Aeyvdc@V8isMS!00000NkvXXu0mjf#d;hP diff --git a/windows/threat-protection/windows-defender-atp/images/not-remediated-icon.png b/windows/threat-protection/windows-defender-atp/images/not-remediated-icon.png index 412b9eced0c73009f9bff20f4993dccc3c14679d..b4d0f75be06e2cce7b6d13d106fdf597e4f2d44e 100644 GIT binary patch delta 1420 zcmV;71#|j{6VD7uiBL{Q4GJ0x0000DNk~Le0000O0000O2nGNE0N{5$_y7O^32;bR za{vGi!~g&e!~vBn4jTXf00(qQO+^Rc3J?wz2dFA@1d&PBe+3#zL_t(YiA|MVj9pa~ z$A4?>ea^jiZaYY;P=^6SC4>+O$b%`GpvH*U2aJ$3G$nz=CMr*U)TBZDK;nxwMlhNH zlKO-RL25FUNT3iU1w!mlgK?@%X-G>2Tg9|QG(obGlH%OR2Kjf7FgWrwolV!Ex`y-rC7I#Vn+f&B zjE)|le)7gPQOaPB3$Q?5ItPD0f~7IpoS=*hBqP@~VfJc{b{|ES%t8fKmi6E!3G3h^N>3;4`lo~8{ zsm2Y*&F#Fb^D+JfrMqj2^Nih!fEs$5&e z%EA3G|7V)ja~P4vR;Vxk82NwiAtJW*TJpk6e*_7YHkHz$CmH-=FY0a}gbF0woYd>$ z*2NtfWnvnUhC^sZuyUTP2ANUc@EOwL8)!VD{`74$FV4{{oudBeHmp%2_U&c({z<0p zdkk`eVvQ-Gw~mue9|Nn(RBX8%U3D!1XZ)vw4EF8D`WNFVfd@QA8gFo`VEH87Z|o-q ze*&x4P)%?i5mf4URhd>eQs1|lPsE?JX@Jof~Hxt|lJK1|%c z3;G|RzVr%~4$rar;7)qC?4t9{hd|)d)A)^_rT?vm%A8DXXqBocn~RJaWM2gp!E1&~ zbU(F|{!_<@yYI&`guC{z@xTdspTCQ|G6WNHLn9GGfT<3enz}&fO0aG?Qo?f&e=OmG z92}iFO`d-NJGn^m45t_2FNa9)y+g28umm|kDq@4<6Gb%0sGPtofMrY$mZ>iKAfuBD zod4bq#s_{)z!^UCTh85oJI&(j#7(ngz)YALsvIzcTJ2K1xg(-5u(jpVL)ETtQ|-8y z;luYaI=+Cv_5!?ll-^CZQ|)~if46Q+2qRmdNaTbY6GDKy3~xqIN3dKZFI1>MO}O$J z?92&PAN?WYQ*Tjiy&ifSP`4_wE#V=wkVr)l@QKu`r9!G}wD3CPSDqzUEcr|gTsBMp zD?cJ@3?8xAL9aZE$w*a=7>7G`KT#Kyz*4nTRLvMt6eiS<#( zOT@8;PE{}^$OfJ>*&Rnk>X%-M4Oda?AZBJtH${m*W*~qe z7={zW%%wiD1h$;77|sB3s6j9VXE1e$ncw`3na3Vyf4J4AM+9{~jVm?lj zOo`HFe_;J5=|AUuEEw_S=V&}|KclgZ)&{6-y_lJUuT$Oo3L=5HdL7lXHxPF{#A%b$ zj6by#Irl;WI6Mw3Hz_&@7_)D@!aF~|mHtEH(6a=Hm}`T8iy4?B;&EcoKFWcIA7u4+ zb})F(297@U41>p~$g+N#MU!~?3I?zGJn#Sbe@C>n#_AhxARakD^C_e5jO@fXjTd$k z%FS6|L1IRrJ$;X3%1BW>gRXmx1%-uRYI^U;P$N98YU>T2xITw8^C4 z*u8f#WH5T;O$g9_^EHm&aXUk^b3`XpG$QXEBnXk>?YC$hdKYmXFCebKzxWS^+6A2` zf7skyxlIAo0WDJg6cIslM_-}Xt9xkqIl>2r2;So@@rjuR6R*C($}eq$n&-9O|C)jK z4>C|6#0&x+T1_P1|EwLnbq9Lj9bB!BxIj$}k(l;3Lfe#17V+Y63g+9ORm3WY z^Ho%YJmw7Kvkb?GFCcc5;}>jY$=7eBfAQ)rX4=MzO&gj1-B0Lw?s@vmGo=~r3oj=$ zc0Pgs*EDC`bPKFqg<^OW)C-2k@Ul@-Kdw!OOltXa528=p?gQ4Zn5`p_pw@9bQUy-uc+le?hcl zh6iHz2)8Hcy!0}anOQI+I**Ca%<5FueuCQQz$r@Vwr%Iw%X_H3vX@%sD0V-|{4-6K z&o@AX*}vY0>mMe}%`u0Em8%%}%*6yBgqANL?<9I!dV?a)fDRmblViX91=*o-nghKQ z9xBaQ<|?C%ef9ecU$zO=0x^g_f8dv%!Pr->XX@6QaYv8RGd)g^Ih+SX8EQAs6Eie? zm8oSb7`ysvvQ;YyBH$6Q&=pn83@16h+aUorJx{i76SeKz5DMhc2g&#BBePD*h7%|h zi3MgEeOoR;zM0dwWe0wI0u@0DBS%qRA+Odb&RoyvHP=%A^ue}tB$z(5M} ziT9b`|2iQSxFd&fjV5vBYKAYm1c3J2|D^W(Zgk&n=E5{ll%6#k@gpNCC=JxtZ)S2} z37y&~y6#-2jvc0Bk^1Oz2G8C|?|EAYW6Mx8OpPF2JLAePUho8_-g=Y$xBZlQvqj;+ zipWS$4@*mNoT&_QIIEzKfBu>5k(}wQ%Guxk9wW<^6IC(iuo$pT0cUMs_#5A1SXzk# zt_mT;926x#gZBi?A=;I^#pd&ZJ`v8^wjDNYB1TX3^p6m&z;Fy*bP2UH&qBNq-`L0A zyYC^hB4yZF$v=-6sCcM&EcB3yvP%X*AqYu8fq?jg&7@3_f)pT1f73ZCYu8iRe9=Oc zj@rb`sH|8)E8hR1saYw$22RE<*(ohm^%A z2#O@wT{{C}h$z*@eY6Q7}xvyr9w1zxGpX z*s&3@7V_3U4uAKDRG43gB9nrme;Gs9|A4;FZe~n65ImX}xJs7RH;)o9$;ulFvE-}k z?!-xFCkUyaQMiTvLLBCM36)-)uvI3r32v%E{+g^~lHrJwd)FnREF@+M3kK?WRN3J`}wlOmcy&oIlb zxvta$TZj|`Ivtpu!8=(T*V24VPT)FiqKhTqljtgje-X=`1SizjtYPx;CpmoE%~U_W z0yV{1NQBlTKNh5nMouAI*Do(Tm3o)J1EDZ%dX7-31Bx>B#n1gW-G(h2hiZqSP)#6rpW>v zO1VvI6&6i#ls=9K7%}mzW2?`Jn z6&}n%+r*Jc)_(;SNkly zjT;<#;{Y;97*RPng2>{Io)0p*=8F(;_{`%}oraX&Boy%ar9&JX{~k+`shWt*1LfeB zw2EzOKgsOUBnb!;xg8{l{=N^eedzNXoA@;(n15M3K?Q~^V@fD5Q&+}`$)}lFe3SRB zf4J0L!bpTK^UsNAI6nC+#4>F;?;7|L3rm-oZBMXc{a1ML+|QZ0{x_=R1c?g7^z}D* z;gv_2UK}UUVrK3*c;@Wo!=-#A%mTuguTOJjb^&ie%i-L$Biz5?JET-``0Nv0oqGvy z8Gk7Yw+hS3diLf0ygKzu?%D9&(llD2M6G#hGDgN^xV5;&ZY6NWFa41-SAR?8#)@i) z%5P_Od5nrO>T?0_9C(PzfQ7{?tX;XAJsbBoGb*Iu#k0R)?Bery7;JNl&!c>vDkXBxL{9Xk+keXlwmnO4Ycrn3a&0UvW^y+Adw1}K9lv8;-&QIiGN~y=0^s2I z4|#3sH%!bPWz)c?*fp}B3$w3ta^gvT^4Cc=-m!;$cR$L|s`oOqY9|+Gdf2_;%YW1o zx4ms0?;hMsYOMf_$}mhpQfFd=3)f%ft$Kn7HvX73Zy!Zuwyl4VwS8MT_U2ESoOuPd#qd-l!hfJ`@XG(5;jzDbh~JNYACq(N^Z_0_axW(*e@3QF z_i;xdOeJE+8dY#4%0)8;PJoKX9YddCZSQuDU3ijgjOqDPj9qw&$B*t}YW@hL{ePe3!^7Xe zt3no7qq){dyIW~UB?;3KxTquJs>#W*EVkbH30C)vP?@oXk2BCaj3Q8EEJ1`= z^m#nfK@(Eo=BSxU3rPq6eSklWe~UFMw^5}QHEmKrtLmqf5;@d`)M7mi=14;3T$w$_ zy>~szzRi!^U}2XT8OsW_^M5t|aqcPxsgS(%DNE-`iSqX^6$6u22Vf?HdCY#;g@ zD_T7bteW}iAhR&J1KpCMbyGA-_oBh6ige$E=??9XH+XfRji@k$DY7~#TO-|})ZFPC zFe=20X1)9z&`gpVo^&|fMWa+Qh^8^<2IRXj-t_8RR7pj?yLR0x+%~n(jWdVREHz)_(*KNklgLCjRew`t*5z=lsuk&Z&@6N_K!U{(o(NWo2%Ei5cd-KQgs2h&OD* zWI2Gteh{Z6XHAsYK5ORjd(LrVq?2EL0oD`|c{od+=jp0ecA3rF3F1YaIK`!bQM_!B z-gK1X4R2DDmAxH%L?`Sy!)K`=02Y7d>a7dh(<0jdB5yD>GK6a*2ty_Ni*qpoB5;lG zCx{gerB9j`Ud71i;HAB@^ncv?j$XYY2I6<_M)a6j2M|(vr0RN` zpGJpp>#H+Sq=w5c5m`m#iw7Ix3N6TF$b#LLO?G&O@!;YTjIdHz{w^JkQHH}!R3(A{ zgy9GxGWUkO^jkM>dp(bsl3TD@nRPD%Gb-xJx>zaMdyaO?MXn}*0Kk445gc!o9}Ef_ z4}X42OKwhl(3W+Vi9b(r(dCO7v!ED)g!Ke_M-)?2cVUw)UVV?R`@8V0&tYih$%fad zFvNC&3LdIz<&gI>-J#|479gBpA;5ywagydj$L9Ko)Lpn1H0G2V9JWGAYr#a><13b8Ix6?nKv{$R zuS5?GpoaV)0tB`6pEM~ze2fmi%0~bqhsu4QL~Zio{p&S89-CW<6ltz)QV?Nn;~5Ah&UO2Rjpn7+=vm5V8T3Gy&mTP>(6s>PO( q+P-c4r?)ljm=^y($a?J Date: Mon, 16 Oct 2017 12:05:08 -0400 Subject: [PATCH 07/12] Update menu items --- ...indows-defender-advanced-threat-protection.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md index 5a57ffe326..99a74cae90 100644 --- a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md @@ -63,14 +63,14 @@ The following table provides information on the icons used all throughout the po Icon | Description :---|:--- -![ATP logo icon](images/atp-logo-icon.png)| ATP logo -![Alert icon](images/alert-icon.png)| Alert – Indication of an activity correlated with advanced attacks. -![Detection icon](images/detection-icon.png)| Detection – Indication of a malware threat detection. -![Active threat icon](images/active-threat-icon.png)| Active threat – Threats actively executing at the time of detection. -![Remediated icon](images/remediated-icon.png)| Remediated – Threat removed from the machine. -![Not remediated icon](images/not-remediated-icon.png)| Not remediated – Threat not removed from the machine. -![Thunderbolt icon](images/atp-thunderbolt-icon.png)| Indicates events that triggered an alert in the **Alert process tree**. -![Machine icon](images/atp-machine-icon.png)| Machine icon +![ATP logo icon](images\atp-logo-icon.png)| ATP logo +![Alert icon](images\alert-icon.png)| Alert – Indication of an activity correlated with advanced attacks. +![Detection icon](images\detection-icon.png)| Detection – Indication of a malware threat detection. +![Active threat icon](images\active-threat-icon.png)| Active threat – Threats actively executing at the time of detection. +![Remediated icon](images\remediated-icon.png)| Remediated – Threat removed from the machine. +![Not remediated icon](images\not-remediated-icon.png)| Not remediated – Threat not removed from the machine. +![Thunderbolt icon](images\atp-thunderbolt-icon.png)| Indicates events that triggered an alert in the **Alert process tree**. +![Machine icon](images\atp-machine-icon.png)| Machine icon ![Windows Defender AV events icon](images\atp-windows-defender-av-events-icon.png)| Windows Defender AV events ![Application Guard events icon](images\atp-Application-Guard-events-icon.png)| Application Guard events ![Device Guard events icon](images\atp-Device-Guard-events-icon.png)| Device Guard events From b8823aad30225486848c91c77f5c1bc0c678d6a3 Mon Sep 17 00:00:00 2001 From: Tanya Bittenmaster <30839220+tbit0001@users.noreply.github.com> Date: Mon, 16 Oct 2017 12:39:20 -0400 Subject: [PATCH 08/12] Update menu items --- ...ows-defender-advanced-threat-protection.md | 62 +++++++++---------- 1 file changed, 31 insertions(+), 31 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md index 99a74cae90..c3d1b74542 100644 --- a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md @@ -63,37 +63,37 @@ The following table provides information on the icons used all throughout the po Icon | Description :---|:--- -![ATP logo icon](images\atp-logo-icon.png)| ATP logo -![Alert icon](images\alert-icon.png)| Alert – Indication of an activity correlated with advanced attacks. -![Detection icon](images\detection-icon.png)| Detection – Indication of a malware threat detection. -![Active threat icon](images\active-threat-icon.png)| Active threat – Threats actively executing at the time of detection. -![Remediated icon](images\remediated-icon.png)| Remediated – Threat removed from the machine. -![Not remediated icon](images\not-remediated-icon.png)| Not remediated – Threat not removed from the machine. -![Thunderbolt icon](images\atp-thunderbolt-icon.png)| Indicates events that triggered an alert in the **Alert process tree**. -![Machine icon](images\atp-machine-icon.png)| Machine icon -![Windows Defender AV events icon](images\atp-windows-defender-av-events-icon.png)| Windows Defender AV events -![Application Guard events icon](images\atp-Application-Guard-events-icon.png)| Application Guard events -![Device Guard events icon](images\atp-Device-Guard-events-icon.png)| Device Guard events -![Exploit Guard events icon](images\atp-Exploit-Guard-events-icon.png)| Exploit Guard events -![Smart Screen events icon](images\atp-Smart-Screen-events-icon.png)| Smart Screen events -![Firewall events icon](images\atp-Firewall-events-icon.png)| Firewall events -![Response action icon](images\atp-respond-action-icon.png)| Response action -![Process events icon](images\atp-process-event-icon.png)| Process events -![Network communication events icon](images\atp-network-communications-icon.png)| Network events -![File observed events icon](images\atp-file-observed-icon.png)| File events -![Registry events icon](images\atp-registry-event-icon.png)| Registry events -![Module load DLL events icon](images\atp-module-load-icon.png)| Load DLL events -![Other events icon](images\atp-Other-events-icon.png)| Other events -![Access token modification icon](images\atp-access-token-modification-icon.png)| Access token modification -![File creation icon](images\atp-file-creation-icon.png)| File creation -![Signer icon](images\atp-signer-icon.png)| Signer -![File path icon](images\atp-File-path-icon.png)| File path -![Command line icon](images\atp-command-line-icon.png)| Command line -![Unsigned file icon](images\atp-unsigned-file-icon.png)| Unsigned file -![Process tree icon](images\atp-process-tree.png)| Process tree -![Memory allocation icon](images\atp-memory-allocation-icon.png)| Memory allocation -![Process injection icon](images\atp-process-injection.png)| Process injection -![Powershell command run icon](images\atp-powershell-command-run-icon.png)| Powershell command run +![ATP logo icon](images/atp-logo-icon.png)| ATP logo +![Alert icon](images/alert-icon.png)| Alert – Indication of an activity correlated with advanced attacks. +![Detection icon](images/detection-icon.png)| Detection – Indication of a malware threat detection. +![Active threat icon](images/active-threat-icon.png)| Active threat – Threats actively executing at the time of detection. +![Remediated icon](images/remediated-icon.png)| Remediated – Threat removed from the machine. +![Not remediated icon](images/not-remediated-icon.png)| Not remediated – Threat not removed from the machine. +![Thunderbolt icon](images/atp-thunderbolt-icon.png)| Indicates events that triggered an alert in the **Alert process tree**. +![Machine icon](images/atp-machine-icon.png)| Machine icon +![Windows Defender AV events icon](images/atp-windows-defender-av-events-icon.png)| Windows Defender AV events +![Application Guard events icon](images/atp-Application-Guard-events-icon.png)| Application Guard events +![Device Guard events icon](images/atp-Device-Guard-events-icon.png)| Device Guard events +![Exploit Guard events icon](images/atp-Exploit-Guard-events-icon.png)| Exploit Guard events +![Smart Screen events icon](images/atp-Smart-Screen-events-icon.png)| Smart Screen events +![Firewall events icon](images/atp-Firewall-events-icon.png)| Firewall events +![Response action icon](images/atp-respond-action-icon.png)| Response action +![Process events icon](images/atp-process-event-icon.png)| Process events +![Network communication events icon](images/atp-network-communications-icon.png)| Network events +![File observed events icon](images/atp-file-observed-icon.png)| File events +![Registry events icon](images/atp-registry-event-icon.png)| Registry events +![Module load DLL events icon](images/atp-module-load-icon.png)| Load DLL events +![Other events icon](images/atp-Other-events-icon.png)| Other events +![Access token modification icon](images/atp-access-token-modification-icon.png)| Access token modification +![File creation icon](images/atp-file-creation-icon.png)| File creation +![Signer icon](images/atp-signer-icon.png)| Signer +![File path icon](images/atp-File-path-icon.png)| File path +![Command line icon](images/atp-command-line-icon.png)| Command line +![Unsigned file icon](images/atp-unsigned-file-icon.png)| Unsigned file +![Process tree icon](images/atp-process-tree.png)| Process tree +![Memory allocation icon](images/atp-memory-allocation-icon.png)| Memory allocation +![Process injection icon](images/atp-process-injection.png)| Process injection +![Powershell command run icon](images/atp-powershell-command-run-icon.png)| Powershell command run ## Related topic [Use the Windows Defender Advanced Threat Protection portal](use-windows-defender-advanced-threat-protection.md) \ No newline at end of file From 6ade4b669c40b921cdb98e5f80372042dbe387fa Mon Sep 17 00:00:00 2001 From: Tanya Bittenmaster <30839220+tbit0001@users.noreply.github.com> Date: Mon, 16 Oct 2017 13:20:45 -0400 Subject: [PATCH 09/12] Update menu items --- ...ows-defender-advanced-threat-protection.md | 62 +++++++++---------- 1 file changed, 31 insertions(+), 31 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md index c3d1b74542..99a74cae90 100644 --- a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md @@ -63,37 +63,37 @@ The following table provides information on the icons used all throughout the po Icon | Description :---|:--- -![ATP logo icon](images/atp-logo-icon.png)| ATP logo -![Alert icon](images/alert-icon.png)| Alert – Indication of an activity correlated with advanced attacks. -![Detection icon](images/detection-icon.png)| Detection – Indication of a malware threat detection. -![Active threat icon](images/active-threat-icon.png)| Active threat – Threats actively executing at the time of detection. -![Remediated icon](images/remediated-icon.png)| Remediated – Threat removed from the machine. -![Not remediated icon](images/not-remediated-icon.png)| Not remediated – Threat not removed from the machine. -![Thunderbolt icon](images/atp-thunderbolt-icon.png)| Indicates events that triggered an alert in the **Alert process tree**. -![Machine icon](images/atp-machine-icon.png)| Machine icon -![Windows Defender AV events icon](images/atp-windows-defender-av-events-icon.png)| Windows Defender AV events -![Application Guard events icon](images/atp-Application-Guard-events-icon.png)| Application Guard events -![Device Guard events icon](images/atp-Device-Guard-events-icon.png)| Device Guard events -![Exploit Guard events icon](images/atp-Exploit-Guard-events-icon.png)| Exploit Guard events -![Smart Screen events icon](images/atp-Smart-Screen-events-icon.png)| Smart Screen events -![Firewall events icon](images/atp-Firewall-events-icon.png)| Firewall events -![Response action icon](images/atp-respond-action-icon.png)| Response action -![Process events icon](images/atp-process-event-icon.png)| Process events -![Network communication events icon](images/atp-network-communications-icon.png)| Network events -![File observed events icon](images/atp-file-observed-icon.png)| File events -![Registry events icon](images/atp-registry-event-icon.png)| Registry events -![Module load DLL events icon](images/atp-module-load-icon.png)| Load DLL events -![Other events icon](images/atp-Other-events-icon.png)| Other events -![Access token modification icon](images/atp-access-token-modification-icon.png)| Access token modification -![File creation icon](images/atp-file-creation-icon.png)| File creation -![Signer icon](images/atp-signer-icon.png)| Signer -![File path icon](images/atp-File-path-icon.png)| File path -![Command line icon](images/atp-command-line-icon.png)| Command line -![Unsigned file icon](images/atp-unsigned-file-icon.png)| Unsigned file -![Process tree icon](images/atp-process-tree.png)| Process tree -![Memory allocation icon](images/atp-memory-allocation-icon.png)| Memory allocation -![Process injection icon](images/atp-process-injection.png)| Process injection -![Powershell command run icon](images/atp-powershell-command-run-icon.png)| Powershell command run +![ATP logo icon](images\atp-logo-icon.png)| ATP logo +![Alert icon](images\alert-icon.png)| Alert – Indication of an activity correlated with advanced attacks. +![Detection icon](images\detection-icon.png)| Detection – Indication of a malware threat detection. +![Active threat icon](images\active-threat-icon.png)| Active threat – Threats actively executing at the time of detection. +![Remediated icon](images\remediated-icon.png)| Remediated – Threat removed from the machine. +![Not remediated icon](images\not-remediated-icon.png)| Not remediated – Threat not removed from the machine. +![Thunderbolt icon](images\atp-thunderbolt-icon.png)| Indicates events that triggered an alert in the **Alert process tree**. +![Machine icon](images\atp-machine-icon.png)| Machine icon +![Windows Defender AV events icon](images\atp-windows-defender-av-events-icon.png)| Windows Defender AV events +![Application Guard events icon](images\atp-Application-Guard-events-icon.png)| Application Guard events +![Device Guard events icon](images\atp-Device-Guard-events-icon.png)| Device Guard events +![Exploit Guard events icon](images\atp-Exploit-Guard-events-icon.png)| Exploit Guard events +![Smart Screen events icon](images\atp-Smart-Screen-events-icon.png)| Smart Screen events +![Firewall events icon](images\atp-Firewall-events-icon.png)| Firewall events +![Response action icon](images\atp-respond-action-icon.png)| Response action +![Process events icon](images\atp-process-event-icon.png)| Process events +![Network communication events icon](images\atp-network-communications-icon.png)| Network events +![File observed events icon](images\atp-file-observed-icon.png)| File events +![Registry events icon](images\atp-registry-event-icon.png)| Registry events +![Module load DLL events icon](images\atp-module-load-icon.png)| Load DLL events +![Other events icon](images\atp-Other-events-icon.png)| Other events +![Access token modification icon](images\atp-access-token-modification-icon.png)| Access token modification +![File creation icon](images\atp-file-creation-icon.png)| File creation +![Signer icon](images\atp-signer-icon.png)| Signer +![File path icon](images\atp-File-path-icon.png)| File path +![Command line icon](images\atp-command-line-icon.png)| Command line +![Unsigned file icon](images\atp-unsigned-file-icon.png)| Unsigned file +![Process tree icon](images\atp-process-tree.png)| Process tree +![Memory allocation icon](images\atp-memory-allocation-icon.png)| Memory allocation +![Process injection icon](images\atp-process-injection.png)| Process injection +![Powershell command run icon](images\atp-powershell-command-run-icon.png)| Powershell command run ## Related topic [Use the Windows Defender Advanced Threat Protection portal](use-windows-defender-advanced-threat-protection.md) \ No newline at end of file From 925254c55360c7286cc132b90fef488fa5b1703a Mon Sep 17 00:00:00 2001 From: Tanya Bittenmaster <30839220+tbit0001@users.noreply.github.com> Date: Mon, 16 Oct 2017 18:01:50 -0400 Subject: [PATCH 10/12] Update menu items --- ...view-windows-defender-advanced-threat-protection.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md index 99a74cae90..ff8dbb1ae4 100644 --- a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md @@ -63,7 +63,7 @@ The following table provides information on the icons used all throughout the po Icon | Description :---|:--- -![ATP logo icon](images\atp-logo-icon.png)| ATP logo +![ATP logo icon](images\atp-logo-icon.png)| Windows Defender ATP logo ![Alert icon](images\alert-icon.png)| Alert – Indication of an activity correlated with advanced attacks. ![Detection icon](images\detection-icon.png)| Detection – Indication of a malware threat detection. ![Active threat icon](images\active-threat-icon.png)| Active threat – Threats actively executing at the time of detection. @@ -72,10 +72,10 @@ Icon | Description ![Thunderbolt icon](images\atp-thunderbolt-icon.png)| Indicates events that triggered an alert in the **Alert process tree**. ![Machine icon](images\atp-machine-icon.png)| Machine icon ![Windows Defender AV events icon](images\atp-windows-defender-av-events-icon.png)| Windows Defender AV events -![Application Guard events icon](images\atp-Application-Guard-events-icon.png)| Application Guard events -![Device Guard events icon](images\atp-Device-Guard-events-icon.png)| Device Guard events -![Exploit Guard events icon](images\atp-Exploit-Guard-events-icon.png)| Exploit Guard events -![Smart Screen events icon](images\atp-Smart-Screen-events-icon.png)| Smart Screen events +![Application Guard events icon](images\atp-Application-Guard-events-icon.png)| Windows Defender Application Guard events +![Device Guard events icon](images\atp-Device-Guard-events-icon.png)| Windows Defender Device Guard events +![Exploit Guard events icon](images\atp-Exploit-Guard-events-icon.png)| Windows Defender Exploit Guard events +![Smart Screen events icon](images\atp-Smart-Screen-events-icon.png)| Windows Defender Smart Screen events ![Firewall events icon](images\atp-Firewall-events-icon.png)| Firewall events ![Response action icon](images\atp-respond-action-icon.png)| Response action ![Process events icon](images\atp-process-event-icon.png)| Process events From ee90a5227132d6741961ad284c63405838edcf0c Mon Sep 17 00:00:00 2001 From: Tanya Bittenmaster <30839220+tbit0001@users.noreply.github.com> Date: Mon, 16 Oct 2017 18:05:01 -0400 Subject: [PATCH 11/12] Update menu items --- ...rtal-overview-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md index ff8dbb1ae4..e4f9a8c51e 100644 --- a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md @@ -71,7 +71,7 @@ Icon | Description ![Not remediated icon](images\not-remediated-icon.png)| Not remediated – Threat not removed from the machine. ![Thunderbolt icon](images\atp-thunderbolt-icon.png)| Indicates events that triggered an alert in the **Alert process tree**. ![Machine icon](images\atp-machine-icon.png)| Machine icon -![Windows Defender AV events icon](images\atp-windows-defender-av-events-icon.png)| Windows Defender AV events +![Windows Defender AV events icon](images\atp-windows-defender-av-events-icon.png)| Windows Defender Antivirus events ![Application Guard events icon](images\atp-Application-Guard-events-icon.png)| Windows Defender Application Guard events ![Device Guard events icon](images\atp-Device-Guard-events-icon.png)| Windows Defender Device Guard events ![Exploit Guard events icon](images\atp-Exploit-Guard-events-icon.png)| Windows Defender Exploit Guard events From 5bbcd466348870989d8cf85ebf14255034d05ab2 Mon Sep 17 00:00:00 2001 From: Tanya Bittenmaster <30839220+tbit0001@users.noreply.github.com> Date: Mon, 16 Oct 2017 18:13:38 -0400 Subject: [PATCH 12/12] Update menu items --- ...rtal-overview-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md index e4f9a8c51e..7b9d20273f 100644 --- a/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md +++ b/windows/threat-protection/windows-defender-atp/portal-overview-windows-defender-advanced-threat-protection.md @@ -75,7 +75,7 @@ Icon | Description ![Application Guard events icon](images\atp-Application-Guard-events-icon.png)| Windows Defender Application Guard events ![Device Guard events icon](images\atp-Device-Guard-events-icon.png)| Windows Defender Device Guard events ![Exploit Guard events icon](images\atp-Exploit-Guard-events-icon.png)| Windows Defender Exploit Guard events -![Smart Screen events icon](images\atp-Smart-Screen-events-icon.png)| Windows Defender Smart Screen events +![SmartScreen events icon](images\atp-Smart-Screen-events-icon.png)| Windows Defender SmartScreen events ![Firewall events icon](images\atp-Firewall-events-icon.png)| Firewall events ![Response action icon](images\atp-respond-action-icon.png)| Response action ![Process events icon](images\atp-process-event-icon.png)| Process events