From d6e9845c2f0051758fab9f25c0f97565a7a87c93 Mon Sep 17 00:00:00 2001 From: Jose Ortega Date: Tue, 30 Apr 2019 01:04:38 -0500 Subject: [PATCH 1/7] update logging section #3050 --- .../windows-defender-smartscreen-overview.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md b/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md index 00899f714f..0f7b20d9d7 100644 --- a/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md +++ b/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md @@ -50,6 +50,20 @@ Windows Defender SmartScreen helps to provide an early warning system against we ## Viewing Windows Defender SmartScreen anti-phishing events When Windows Defender SmartScreen warns or blocks an employee from a website, it's logged as [Event 1035 - Anti-Phishing](https://technet.microsoft.com/scriptcenter/dd565657(v=msdn.10).aspx). + +## Viewing Windows event logs for SmartScreen +SmartScreen also have it's own events Ids on the "Microsoft-Windows-SmartScreen/Debug" + + +|EventID | Description | +| :---: | :---: | +|1000 | Application SmartScreen Event| +|1001 | Uri SmartScreen Event| +|1002 | User Decision SmartScreen Event| + +>[!IMPORTANT] +> This log is not enabled by default: Microsoft-Windows-SmartScreen/Debug, an required an MDM Policy to enable it. + ## Related topics - [SmartScreen Frequently Asked Questions (FAQ)](https://feedback.smartscreen.microsoft.com/smartscreenfaq.aspx) @@ -57,5 +71,7 @@ When Windows Defender SmartScreen warns or blocks an employee from a website, it - [Threat protection](../index.md) +- [Available Windows Defender SmartScreen Group Policy and mobile device management (MDM) settings](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-available-settings) + >[!NOTE] >Help to make this topic better by providing us with edits, additions, and feedback. For info about how to contribute to this topic, see [Contributing to TechNet content](https://github.com/Microsoft/windows-itpro-docs/blob/master/CONTRIBUTING.md). \ No newline at end of file From 0d41df34f72bc5d1cccbb97f1c3b3e85e758cf65 Mon Sep 17 00:00:00 2001 From: Nicole Turner <39884432+nenonix@users.noreply.github.com> Date: Tue, 30 Apr 2019 10:32:19 -0500 Subject: [PATCH 2/7] Nenonix Copy Review Update Applying suggeste4d change Co-Authored-By: j0rt3g4 --- .../windows-defender-smartscreen-overview.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md b/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md index 0f7b20d9d7..384a5ef080 100644 --- a/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md +++ b/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md @@ -52,7 +52,7 @@ When Windows Defender SmartScreen warns or blocks an employee from a website, it ## Viewing Windows event logs for SmartScreen -SmartScreen also have it's own events Ids on the "Microsoft-Windows-SmartScreen/Debug" +SmartScreen has it's own events IDs on the "Microsoft-Windows-SmartScreen/Debug" |EventID | Description | @@ -74,4 +74,4 @@ SmartScreen also have it's own events Ids on the "Microsoft-Windows-SmartScreen/ - [Available Windows Defender SmartScreen Group Policy and mobile device management (MDM) settings](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-available-settings) >[!NOTE] ->Help to make this topic better by providing us with edits, additions, and feedback. For info about how to contribute to this topic, see [Contributing to TechNet content](https://github.com/Microsoft/windows-itpro-docs/blob/master/CONTRIBUTING.md). \ No newline at end of file +>Help to make this topic better by providing us with edits, additions, and feedback. For info about how to contribute to this topic, see [Contributing to TechNet content](https://github.com/Microsoft/windows-itpro-docs/blob/master/CONTRIBUTING.md). From 41906bb08ccbd12dfbe1cb82c6a42b34759e2fec Mon Sep 17 00:00:00 2001 From: Nicole Turner <39884432+nenonix@users.noreply.github.com> Date: Tue, 30 Apr 2019 10:33:05 -0500 Subject: [PATCH 3/7] Removing en-us from link Removing en-us from the link Co-Authored-By: j0rt3g4 --- .../windows-defender-smartscreen-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md b/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md index 384a5ef080..8e5327315b 100644 --- a/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md +++ b/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md @@ -71,7 +71,7 @@ SmartScreen has it's own events IDs on the "Microsoft-Windows-SmartScreen/Debug" - [Threat protection](../index.md) -- [Available Windows Defender SmartScreen Group Policy and mobile device management (MDM) settings](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-available-settings) +- [Available Windows Defender SmartScreen Group Policy and mobile device management (MDM) settings](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-available-settings) >[!NOTE] >Help to make this topic better by providing us with edits, additions, and feedback. For info about how to contribute to this topic, see [Contributing to TechNet content](https://github.com/Microsoft/windows-itpro-docs/blob/master/CONTRIBUTING.md). From aec019813997679f10ee28ac89d497f8cd1d5ff9 Mon Sep 17 00:00:00 2001 From: Nicole Turner <39884432+nenonix@users.noreply.github.com> Date: Tue, 30 Apr 2019 13:48:52 -0500 Subject: [PATCH 4/7] Update windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md Co-Authored-By: j0rt3g4 --- .../windows-defender-smartscreen-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md b/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md index 8e5327315b..feb72a51a8 100644 --- a/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md +++ b/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md @@ -62,7 +62,7 @@ SmartScreen has it's own events IDs on the "Microsoft-Windows-SmartScreen/Debug" |1002 | User Decision SmartScreen Event| >[!IMPORTANT] -> This log is not enabled by default: Microsoft-Windows-SmartScreen/Debug, an required an MDM Policy to enable it. +> Microsoft-Windows-SmartScreen/Debug is not enabled by default. This log requires an MDM Policy to enable it. ## Related topics - [SmartScreen Frequently Asked Questions (FAQ)](https://feedback.smartscreen.microsoft.com/smartscreenfaq.aspx) From 48dd3a2e973f03b24f27b3088601b546d71ac5a2 Mon Sep 17 00:00:00 2001 From: Jose Ortega Date: Tue, 30 Apr 2019 19:01:11 -0500 Subject: [PATCH 5/7] Updates from @justinha --- .../windows-defender-smartscreen-overview.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md b/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md index 0f7b20d9d7..a5f8f3cd5d 100644 --- a/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md +++ b/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md @@ -61,8 +61,6 @@ SmartScreen also have it's own events Ids on the "Microsoft-Windows-SmartScreen/ |1001 | Uri SmartScreen Event| |1002 | User Decision SmartScreen Event| ->[!IMPORTANT] -> This log is not enabled by default: Microsoft-Windows-SmartScreen/Debug, an required an MDM Policy to enable it. ## Related topics - [SmartScreen Frequently Asked Questions (FAQ)](https://feedback.smartscreen.microsoft.com/smartscreenfaq.aspx) From 6316a44027e72f3c897a61d665c05d472b3b15b9 Mon Sep 17 00:00:00 2001 From: Jose Gabriel Ortega Castro Date: Tue, 30 Apr 2019 19:07:26 -0500 Subject: [PATCH 6/7] Not changed anything new commit --- .../windows-defender-smartscreen-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md b/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md index 8dea2b97b6..546050fc5f 100644 --- a/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md +++ b/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md @@ -70,5 +70,5 @@ SmartScreen has it's own events IDs on the "Microsoft-Windows-SmartScreen/Debug" - [Available Windows Defender SmartScreen Group Policy and mobile device management (MDM) settings](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-available-settings) ->[!NOTE] +>[!NOTE] >Help to make this topic better by providing us with edits, additions, and feedback. For info about how to contribute to this topic, see [Contributing to TechNet content](https://github.com/Microsoft/windows-itpro-docs/blob/master/CONTRIBUTING.md). From 704aedfcc57f816e6070101c1f0fb30b42f1d914 Mon Sep 17 00:00:00 2001 From: Justin Hall Date: Wed, 1 May 2019 06:10:48 -0700 Subject: [PATCH 7/7] Update windows-defender-smartscreen-overview.md --- .../windows-defender-smartscreen-overview.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md b/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md index 546050fc5f..ccc35c4967 100644 --- a/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md +++ b/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-overview.md @@ -52,7 +52,7 @@ When Windows Defender SmartScreen warns or blocks an employee from a website, it ## Viewing Windows event logs for SmartScreen -SmartScreen has it's own events IDs on the "Microsoft-Windows-SmartScreen/Debug" +SmartScreen events appear in the Microsoft-Windows-SmartScreen/Debug log in Event Viewer. |EventID | Description | @@ -64,8 +64,6 @@ SmartScreen has it's own events IDs on the "Microsoft-Windows-SmartScreen/Debug" ## Related topics - [SmartScreen Frequently Asked Questions (FAQ)](https://feedback.smartscreen.microsoft.com/smartscreenfaq.aspx) -- [How to recognize phishing email messages, links, or phone calls](https://www.microsoft.com/en-us/safety/online-privacy/phishing-symptoms.aspx) - - [Threat protection](../index.md) - [Available Windows Defender SmartScreen Group Policy and mobile device management (MDM) settings](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-smartscreen/windows-defender-smartscreen-available-settings)