diff --git a/windows/security/threat-protection/windows-defender-antivirus/next-gen-behavior-blocking.md b/windows/security/threat-protection/windows-defender-antivirus/next-gen-behavior-blocking.md index a428e02b2e..07f1ed347d 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/next-gen-behavior-blocking.md +++ b/windows/security/threat-protection/windows-defender-antivirus/next-gen-behavior-blocking.md @@ -24,15 +24,14 @@ ms.collection: ## What is behavioral blocking? -Behavioral blocking and containment capabilities in Microsoft Defender ATP use machine learning to identify threats through behavioral patterns. When threats are detected, they are monitored, processed, classified by machine learning, and blocked, almost instantly. +Behavioral blocking and containment capabilities in Microsoft Defender ATP use machine learning to identify threats through behavioral patterns. When threats are detected, they are monitored, processed, classified by machine learning, and blocked, almost instantly. Windows Defender Antivirus on your machine works together with Microsoft Defender ATP to offer this protection. -> [!TIP] -> See [In hot pursuit of elusive threats: AI-driven behavior-based blocking stops attacks in their tracks](https://www.microsoft.com/security/blog/2019/10/08/in-hot-pursuit-of-elusive-threats-ai-driven-behavior-based-blocking-stops-attacks-in-their-tracks). - -Windows Defender Antivirus on your machine works together with Microsoft Defender ATP to offer this protection. Behavioral blocking is a post-execution protection, as shown in the following diagram: +Behavioral blocking is a post-execution protection, as shown in the following diagram: ![diagram of pre and post execution protection](images/pre-execution-and-post-execution-detection-engines.png) +See [In hot pursuit of elusive threats: AI-driven behavior-based blocking stops attacks in their tracks](https://www.microsoft.com/security/blog/2019/10/08/in-hot-pursuit-of-elusive-threats-ai-driven-behavior-based-blocking-stops-attacks-in-their-tracks). + ## Components of behavioral blocking Behavioral blocking consists of the following components: @@ -43,9 +42,8 @@ Behavioral blocking consists of the following components: - Client-side behavioral blocking - Containment during automated investigation and remediation - ## Next steps - [Deploy Microsoft Defender ATP baselines](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-machines-security-baseline) -- [Learn more about shadow protection](shadow-protection.md) \ No newline at end of file +- [Turn on shadow protection](shadow-protection.md) \ No newline at end of file