diff --git a/windows/security/threat-protection/windows-defender-antivirus/next-gen-behavior-blocking.md b/windows/security/threat-protection/windows-defender-antivirus/next-gen-behavior-blocking.md
index 44380ca7bc..dcfc2451a4 100644
--- a/windows/security/threat-protection/windows-defender-antivirus/next-gen-behavior-blocking.md
+++ b/windows/security/threat-protection/windows-defender-antivirus/next-gen-behavior-blocking.md
@@ -1,7 +1,7 @@
 ---
 title: Behavioral blocking in next-generation protection
 description: Learn about behavioral blocking in next-generation protection
-keywords: Windows Defender Antivirus, false positives, false negatives, exclusions
+keywords: Windows Defender Antivirus, behavioral monitoring, behavioral blocking, behavior
 search.product: eADQiWindows 10XVcnh
 ms.pagetype: security
 author: denisebmsft
diff --git a/windows/security/threat-protection/windows-defender-antivirus/shadow-protection.md b/windows/security/threat-protection/windows-defender-antivirus/shadow-protection.md
new file mode 100644
index 0000000000..d6946997c3
--- /dev/null
+++ b/windows/security/threat-protection/windows-defender-antivirus/shadow-protection.md
@@ -0,0 +1,33 @@
+---
+title: Shadow protection in next-generation protection
+description: Learn about shadow protection in next-generation protection
+keywords: Windows Defender Antivirus, shadow protection, passive mode
+search.product: eADQiWindows 10XVcnh
+ms.pagetype: security
+author: denisebmsft
+ms.author: deniseb
+manager: dansimp
+ms.reviewer: shwetaj
+audience: ITPro 
+ms.topic: article 
+ms.prod: w10 
+localization_priority: Normal
+ms.custom: next-gen
+ms.collection: 
+---
+
+# Shadow protection in next-generation protection
+
+**Applies to:**
+
+- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559)
+
+## section 1
+
+body
+
+## section 2
+
+body
+
+## Next steps
\ No newline at end of file