From dd48997d65cc3e7a016ca5b6157dfd872d064348 Mon Sep 17 00:00:00 2001 From: Iaan D'Souza-Wiltshire Date: Thu, 28 Sep 2017 16:32:17 -0700 Subject: [PATCH] update to lik to atp --- .../event-views-exploit-guard.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/threat-protection/windows-defender-exploit-guard/event-views-exploit-guard.md b/windows/threat-protection/windows-defender-exploit-guard/event-views-exploit-guard.md index a3b07d5f9c..f26ea754f2 100644 --- a/windows/threat-protection/windows-defender-exploit-guard/event-views-exploit-guard.md +++ b/windows/threat-protection/windows-defender-exploit-guard/event-views-exploit-guard.md @@ -16,7 +16,7 @@ ms.author: iawilt --- -# Reduce attack surfaces with Windows Defender Exploit Guard +# View Windows Defender Exploit Guard events **Applies to:** @@ -35,6 +35,8 @@ Reviewing the events is also handy when you are evaluating the features, as you This topic lists all the events, their associated feature or setting, and describes how to create custom views to filter to specific events. +You can also get detailed reporting into Windows Defender EG events and blocks as part of the usual [alert investigation scenarios](../windows-defender-atp/investigate-alerts-windows-defender-advanced-threat-protection.md) in the Windows Defender Security Center console, which you gain access to if you have an E5 subsciption and use [Windows Defender Advanced Threat Protection](../windows-defender-atp/windows-defender-advanced-threat-protection.md). + ## Use custom views to review Windows Defender Exploit Guard features You can create custom views in the Windows Event Viewer to only see events for specific features and settings.