From e3940057fe1c971465cc682ec0a9a27dab65f7a1 Mon Sep 17 00:00:00 2001 From: Zachariusz Karwacki Date: Wed, 28 Aug 2019 10:09:34 -0700 Subject: [PATCH] Adding information about collection of EDR early preview flag as part of required diagnostic data --- .../microsoft-defender-atp-mac-privacy.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac-privacy.md b/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac-privacy.md index 977d404c8d..7cf18820f8 100644 --- a/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac-privacy.md +++ b/windows/security/threat-protection/windows-defender-antivirus/microsoft-defender-atp-mac-privacy.md @@ -122,6 +122,7 @@ The following fields are collected: | cloud_service.service_uri | URI used to communicate with the cloud. | | cloud_service.diagnostic_level | Diagnostic level of the device (required, optional). | | cloud_service.automatic_sample_submission | Whether automatic sample submission is turned on or not. | +| edr.early_preview | Whether the machine should run EDR early preview features. | | features.\[optional feature name\] | List of preview features, along with whether they are enabled or not. | #### Product and service performance data events