Skip to content

Commit 4ba5692

Browse files
Merge pull request #4767 from MicrosoftDocs/main
[AutoPublish] main to live - 08/18 15:30 PDT | 08/19 04:00 IST
2 parents 32d741e + 90df1aa commit 4ba5692

File tree

2 files changed

+24
-15
lines changed

2 files changed

+24
-15
lines changed

defender-endpoint/mde-demonstration-amsi.md

Lines changed: 18 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
---
22
title: AMSI demonstrations with Microsoft Defender for Endpoint
33
description: Demonstration of AMSI detection by Microsoft Defender for Endpoint
4-
author: emmwalshh
5-
ms.author: ewalsh
4+
author: paulinbar
5+
ms.author: painbar
66
ms.reviewer: yongrhee
77
ms.localizationpriority: medium
88
ms.service: defender-endpoint
@@ -11,7 +11,7 @@ audience: ITPro
1111
ms.collection:
1212
- m365-security
1313
ms.topic: how-to
14-
ms.date: 10/16/2024
14+
ms.date: 08/19/2025
1515
search.appverid: met150
1616
ms.custom:
1717
- partner-contribution
@@ -49,8 +49,11 @@ In this demonstration article, you have two engine choices to test AMSI:
4949

5050
1. Save the following PowerShell script as `AMSI_PoSh_script.ps1`:
5151

52-
:::image type="content" source="media/mde-demonstrations-amsi/test-amsi-powershell-save-script.png" alt-text="Screenshot showing PowerShell script to save as AMSI_PoSh_script.ps1" lightbox="media/mde-demonstrations-amsi/test-amsi-powershell-save-script.png":::
53-
52+
```powershell
53+
$testString = "AMSI Test Sample: " + "7e72c3ce-861b-4339-8740-0ac1484c1386"
54+
Invoke-Expression $testString
55+
```
56+
5457
2. On your device, open PowerShell as an administrator.
5558

5659
3. Type `Powershell -ExecutionPolicy Bypass AMSI_PoSh_script.ps1`, and then press **Enter**.
@@ -64,17 +67,22 @@ In this demonstration article, you have two engine choices to test AMSI:
6467

6568
1. Save the following VBScript as `AMSI_vbscript.vbs`:
6669

67-
:::image type="content" source="media/mde-demonstrations-amsi/test-amsi-vbscript-save-script.png" alt-text="Screenshot showing VBScript to save as AMSI_vbscript.vbs" lightbox="media/mde-demonstrations-amsi/test-amsi-vbscript-save-script.png":::
68-
70+
```vbscript
71+
REM Save this sample AMSI vbscript as AMSI_vbscript.vbs
72+
Dim result
73+
result = eval("AMSI Test Sample: " + "7e72c3ce-861b-4339-8740-0ac1484c1386")
74+
WScript.Echo result
75+
```
76+
6977
2. On your Windows Device, open Command Prompt as an administrator.
7078

71-
2. Type `wscript AMSI_vbscript.js`, and then press **Enter**.
79+
1. Type `wscript AMSI_vbscript.vbs`, and then press **Enter**.
7280

7381
The result should be as follows:
7482

75-
:::image type="content" source="media/mde-demonstrations-amsi/test-amsi-vbscript-results.png" alt-text="Screenshot showing the AMSI test results. It should show that antivirus software blocked the script." lightbox="media/mde-demonstrations-amsi/test-amsi-vbscript-results.png":::
83+
:::image type="content" source="media/mde-demonstrations-amsi/test-amsi-vbscript-results.png" alt-text="Screenshot showing the AMSI test results. It should show that antivirus software blocked the script." lightbox="media/mde-demonstrations-amsi/test-amsi-vbscript-results.png":::
84+
7685

77-
7886
### Verifying the test results
7987

8088
In your protection history, you should be able to see the following information:

defender-office-365/mdo-support-teams-about.md

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Microsoft Defender for Office 365 Plan 2 support for Microsoft Teams
2+
title: Microsoft Defender for Office 365 support for Microsoft Teams
33
f1.keywords:
44
- NOCSH
55
author: chrisda
@@ -14,14 +14,15 @@ search.appverid:
1414
ms.collection:
1515
- m365-security
1616
- tier1
17-
description: Admins can learn about Microsoft Teams features in Microsoft Defender for Office 365 Plan 2.
17+
description: Admins can learn about Microsoft Teams features in Microsoft Defender for Office 365.
1818
ms.service: defender-office-365
19-
ms.date: 07/28/2025
19+
ms.date: 08/18/2025
2020
appliesto:
21-
- ✅ <a href="https://learn.microsoft.com/defender-office-365/mdo-about#defender-for-office-365-plan-1-vs-plan-2-cheat-sheet" target="_blank">Microsoft Defender for Office 365 Plan 2</a>
21+
- ✅ <a href="https://learn.microsoft.com/defender-office-365/mdo-about#defender-for-office-365-plan-1-vs-plan-2-cheat-sheet" target="_blank">Microsoft Defender for Office 365 Plan 1 and Plan 2</a>
22+
- ✅ <a href="https://learn.microsoft.com/defender-xdr/microsoft-365-defender" target="_blank">Microsoft Defender XDR</a>
2223
---
2324

24-
# Microsoft Defender for Office 365 Plan 2 support for Microsoft Teams
25+
# Microsoft Defender for Office 365 support for Microsoft Teams
2526

2627
[!include[Prerelease information](../includes/prerelease.md)]
2728

0 commit comments

Comments
 (0)