deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-18 16:27:22 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Update mac-support-perf.md

Browse Source 
to fix suggestions
This commit is contained in:
Lovina Saldanha 2021-02-18 16:39:02 +05:30
parent 02fdbe74f9
commit c9e3eeb1fb
1 changed files with 37 additions and 27 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
windows/security/threat-protection/microsoft-defender-atp/mac-support-perf.md
View File

@ -57,18 +57,24 @@ The following steps can be used to troubleshoot and mitigate these issues:
2. Open Finder and navigate to **Applications** > **Utilities**. Open **Activity Monitor** and analyze which applications are using the resources on your system. Typical examples include software updaters and compilers.
3. To find the applications that are triggering the most scans, you can use real-time statistics gathered by Defender for Endpoint for Mac.
1. To find the applications that are triggering the most scans, you can use real-time statistics gathered by Defender for Endpoint for Mac.
> [!NOTE]
> This feature is available in version 100.90.70 or newer.
This feature is enabled by default on the **Dogfood** and **InsiderFast** channels. If you're using a different update channel, this feature can be enabled from the command line:
```bash
mdatp config real-time-protection-statistics --value enabled
```
This feature requires real-time protection to be enabled. To check the status of real-time protection, run the following command:
```bash
mdatp health --field real_time_protection_enabled
```
Verify that the **real_time_protection_enabled** entry is true. Otherwise, run the following command to enable it:
```bash
mdatp config real-time-protection --value enabled
```
@ -76,7 +82,9 @@ The following steps can be used to troubleshoot and mitigate these issues:
```output
Configuration property updated
```
To collect current statistics, run:
```bash
mdatp config real-time-protection --value enabled
```
@ -86,7 +94,7 @@ The following steps can be used to troubleshoot and mitigate these issues:
The output of this command will show all processes and their associated scan activity.
4. On your Mac system, download the sample Python parser high_cpu_parser.py using the command:
1. On your Mac system, download the sample Python parser high_cpu_parser.py using the command:
The output of this command should be similar to the following:
@ -95,9 +103,11 @@ The following steps can be used to troubleshoot and mitigate these issues:
```bash
chmod +x high_cpu_parser.py
```
```bash
cat real_time_protection.json | python high_cpu_parser.py > real_time_protection.log
```
The output of the above is a list of the top contributors to performance issues. The first column is the process identifier (PID), the second column is te process name, and the last column is the number of scanned files, sorted by impact.
For example, the output of the command will be something like the below:
@ -121,6 +131,6 @@ The following steps can be used to troubleshoot and mitigate these issues:
> [!NOTE]
> The application stores statistics in memory and only keeps track of file activity since it was started and real-time protection was enabled. Processes that were launched before or during periods when real time protection was off are not counted. Additionally, only events which triggered scans are counted.
5. Configure Microsoft Defender for Endpoint for Mac with exclusions for the processes or disk locations that contribute to the performance issues and re-enable real-time protection.
1. Configure Microsoft Defender for Endpoint for Mac with exclusions for the processes or disk locations that contribute to the performance issues and re-enable real-time protection.
See [Configure and validate exclusions for Microsoft Defender for Endpoint for Mac](mac-exclusions.md) for details.