Update defender-csp.md

updated definition to security intelligence
added delay info to engine and platform 
corrected the enum values 
added missing current (staged) description under security intelligence
This commit is contained in:
Marysia Kaminska 2021-10-04 11:48:29 -07:00 committed by GitHub
parent 9e285dac8e
commit d8fb44ba59
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -73,7 +73,7 @@ Defender
--------SupportLogLocation (Added in the next major release of Windows 10)
--------PlatformUpdatesChannel (Added with the 4.18.2106.5 Defender platform release)
--------EngineUpdatesChannel (Added with the 4.18.2106.5 Defender platform release)
--------DefinitionUpdatesChannel (Added with the 4.18.2106.5 Defender platform release)
--------SecurityIntelligenceUpdatesChannel (Added with the 4.18.2106.5 Defender platform release)
--------DisableGradualRelease (Added with the 4.18.2106.5 Defender platform release)
----Scan
----UpdateSignature
@ -722,6 +722,8 @@ Current Channel (Staged): Devices will be offered updates after the monthly grad
Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%).
Critical: Devices will be offered updates with a 48-hour delay. Suggested for critical environments only
If you disable or do not configure this policy, the device will stay up to date automatically during the gradual release cycle. Suitable for most devices.
The data type is integer.
@ -730,10 +732,12 @@ Supported operations are Add, Delete, Get, Replace.
Valid values are:
- 0: Not configured (Default)
- 1: Beta Channel - Prerelease
- 2: Current Channel (Preview)
- 3: Current Channel (Staged)
- 4: Current Channel (Broad)
- 2: Beta Channel - Prerelease
- 3: Current Channel (Preview)
- 4: Current Channel (Staged)
- 5: Current Channel (Broad)
- 6: Critical- Time Delay
More details:
@ -751,6 +755,8 @@ Current Channel (Staged): Devices will be offered updates after the monthly grad
Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%).
Critical: Devices will be offered updates with a 48-hour delay. Suggested for critical environments only
If you disable or do not configure this policy, the device will stay up to date automatically during the gradual release cycle. Suitable for most devices.
The data type is integer.
@ -758,19 +764,22 @@ The data type is integer.
Supported operations are Add, Delete, Get, Replace.
Valid values are:
- 0 - Not configured (Default)
- 1 - Beta Channel - Prerelease
- 2 - Current Channel (Preview)
- 3 - Current Channel (Staged)
- 4 - Current Channel (Broad)
- 0: Not configured (Default)
- 2: Beta Channel - Prerelease
- 3: Current Channel (Preview)
- 4: Current Channel (Staged)
- 5: Current Channel (Broad)
- 6: Critical- Time Delay
More details:
- [Manage the gradual rollout process for Microsoft Defender updates](/microsoft-365/security/defender-endpoint/manage-gradual-rollout)
- [Create a custom gradual rollout process for Microsoft Defender updates](/microsoft-365/security/defender-endpoint/configure-updates)
<a href="" id="configuration-definitionupdateschannel"></a>**Configuration/DefinitionUpdatesChannel**
Enable this policy to specify when devices receive daily Microsoft Defender definition updates during the daily gradual rollout.
<a href="" id="configuration-definitionupdateschannel"></a>**Configuration/SecurityIntelligenceUpdatesChannel**
Enable this policy to specify when devices receive daily Microsoft Defender security intelligence (definition) updates during the daily gradual rollout.
Current Channel (Staged): Devices will be offered updates after the release cycle. Suggested to apply to a small, representative part of production population (~10%).
Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%).
@ -781,8 +790,8 @@ Supported operations are Add, Delete, Get, Replace.
Valid Values are:
- 0: Not configured (Default)
- 3: Current Channel (Staged)
- 4: Current Channel (Broad)
- 4: Current Channel (Staged)
- 5: Current Channel (Broad)
More details: