Team: Huntress Managed Endpoint Detection and Response (EDR)
Product: Managed Defender
Environment: Microsoft Windows
Overview of Microsoft Defender Antivirus
Huntress Managed AV with Microsoft Defender Antivirus protects your Windows devices from software threats, such as viruses, malware, and spyware. Here's a list of the common modules:
Anti-malware - Also Criteria
Always-on protection consists of Real-time Protection, Behavior Monitoring, and heuristics to identify malware based on known suspicious and malicious activities.
Exploit protection - Exploit protection automatically applies many exploit mitigation techniques to operating system processes and apps
Network Protection - Network protection helps protect devices from Internet-based events. Network protection is an attack surface reduction capability.
System guard - Microsoft Windows Defender System Guard reorganizes the existing Windows 10 system integrity features under one roof and sets up the next set of investments in Windows security
Threat protection - In Windows, hardware and software work together to help protect you from new and emerging threats
Network Inspection - Network protection is an attack surface reduction capability.
IE/Outlook Antivirus - Web protection lets you secure your devices against web threats and helps you regulate unwanted content. Often referred to as IoavProtectionEnabled.
Anti-spyware - Spyware collects data, such as web-browsing activity, and sends the data to remote servers.
Pertinent Information: