--- title: Defender DDF file description: Learn how the OMA DM device description framework (DDF) for the Defender configuration service provider is used. ms.assetid: 39B9E6CF-4857-4199-B3C3-EC740A439F65 ms.reviewer: manager: dansimp ms.author: dansimp ms.topic: article ms.prod: w10 ms.technology: windows author: manikadhiman ms.localizationpriority: medium ms.date: 07/23/2021 --- # Defender DDF file This article shows the OMA DM device description framework (DDF) for the **Defender** configuration service provider. DDF files are used only with OMA DM provisioning XML. Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download). The XML below is the current version for this CSP. ```xml ]> 1.2 Defender ./Vendor/MSFT com.microsoft/1.3/MDM/Defender Detections ThreatId Name text/plain URL text/plain Severity text/plain Category text/plain CurrentStatus text/plain ExecutionStatus text/plain InitialDetectionTime text/plain LastThreatStatusChangeTime text/plain NumberOfDetections text/plain Health ProductStatus text/plain ComputerState text/plain DefenderEnabled text/plain RtpEnabled text/plain NisEnabled text/plain QuickScanOverdue text/plain FullScanOverdue text/plain SignatureOutOfDate text/plain RebootRequired text/plain FullScanRequired text/plain EngineVersion text/plain SignatureVersion text/plain DefenderVersion text/plain QuickScanTime text/plain FullScanTime text/plain QuickScanSigVersion text/plain FullScanSigVersion text/plain TamperProtectionEnabled text/plain IsVirtualMachine text/plain Configuration TamperProtection text/plain EnableFileHashComputation text/plain SupportLogLocation text/plain DisableGradualRelease Enable this policy to disable gradual rollout of Defender updates. text/plain 99.9.99999 1.3 1 Gradual release is disabled 0 Gradual release is enabled DefinitionUpdatesChannel Enable this policy to specify when devices receive daily Microsoft Defender definition updates during the daily gradual rollout. text/plain 99.9.99999 1.3 0 Not configured (Default). The device will stay up to date automatically during the gradual release cycle. Suitable for most devices. 4 Current Channel (Staged): Devices will be offered updates after the monthly gradual release cycle. Suggested to apply to a small, representative part of your production population (~10%). 5 Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%). EngineUpdatesChannel Enable this policy to specify when devices receive Microsoft Defender engine updates during the monthly gradual rollout. text/plain 99.9.99999 1.3 0 Not configured (Default). The device will stay up to date automatically during the gradual release cycle. Suitable for most devices. 2 Beta Channel: Devices set to this channel will be the first to receive new updates. Select Beta Channel to participate in identifying and reporting issues to Microsoft. Devices in the Windows Insider Program are subscribed to this channel by default. For use in (manual) test environments only and a limited number of devices. 3 Current Channel (Preview): Devices set to this channel will be offered updates earliest during the monthly gradual release cycle. Suggested for pre-production/validation environments. 4 Current Channel (Staged): Devices will be offered updates after the monthly gradual release cycle. Suggested to apply to a small, representative part of your production population (~10%). 5 Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%). PlatformUpdatesChannel Enable this policy to specify when devices receive Microsoft Defender platform updates during the monthly gradual rollout. text/plain 99.9.99999 1.3 0 Not configured (Default). The device will stay up to date automatically during the gradual release cycle. Suitable for most devices. 2 Beta Channel: Devices set to this channel will be the first to receive new updates. Select Beta Channel to participate in identifying and reporting issues to Microsoft. Devices in the Windows Insider Program are subscribed to this channel by default. For use in (manual) test environments only and a limited number of devices. 3 Current Channel (Preview): Devices set to this channel will be offered updates earliest during the monthly gradual release cycle. Suggested for pre-production/validation environments. 4 Current Channel (Staged): Devices will be offered updates after the monthly gradual release cycle. Suggested to apply to a small, representative part of your production population (~10%). 5 Current Channel (Broad): Devices will be offered updates only after the gradual release cycle completes. Suggested to apply to a broad set of devices in your production population (~10-100%). Scan text/plain UpdateSignature text/plain OfflineScan text/plain ``` ## See also [Defender configuration service provider](defender-csp.md)