Skip to content

Commit 214bd28

Browse files
committed
Update switch-to-mde-phase-2.md
1 parent 6d67613 commit 214bd28

File tree

1 file changed

+21
-0
lines changed

1 file changed

+21
-0
lines changed

defender-endpoint/switch-to-mde-phase-2.md

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -95,6 +95,27 @@ The specific exclusions to configure depend on which version of Windows your end
9595

9696
### macOS
9797

98+
The following table lists processes to exclude in your non-Microsoft antivirus/antimalware solution:
99+
100+
| Name | Description |
101+
|--|--|
102+
| `MpCmdRun.exe` | Microsoft Defender Antivirus command-line utility |
103+
| `MpDlpCmd.exe` | Microsoft Endpoint DLP command-line utility |
104+
| `MsMpEng.exe` | Microsoft Defender Antivirus service executable |
105+
| `` | Microsoft Security Client Policy Configuration Tool |
106+
| `` | Microsoft Defender Antivirus Core Service |
107+
| `` | Microsoft Purview Data Loss Prevention Service |
108+
| `` | Microsoft Defender Antivirus Network Realtime Inspection |
109+
| `` | Microsoft Defender for Endpoint service executable |
110+
| `` | Microsoft Defender for Endpoint communication module |
111+
| `` | Microsoft Defender for Endpoint Sense IR (Incident Response) module |
112+
| `` | Microsoft Defender for Endpoint Sense CE (Classification Engine) module |
113+
| `` | Microsoft Defender for Endpoint Sample Upload module |
114+
| `` | Microsoft Defender for Endpoint Sense NDR (Network Detection and Response) module |
115+
| `` | Microsoft Defender for Endpoint Sense SC (Screenshot Capture) module |
116+
| `` | Microsoft Defender for Endpoint Sense CM (Configuration Management) |
117+
| `` | Microsoft Defender for Endpoint Sense TVM (Threat Vulnerability Management) |
118+
98119

99120
### [**Linux**](#tab/Linux)
100121

0 commit comments

Comments
 (0)