Skip to content

Commit 91ba096

Browse files
Update configure-attack-disruption.md
The registry key in the original document does not exist on Windows 11 workstations I tested on (OS Build: 26100.3775 ) The proposed key does offer the correct MS Sense version installed on the client.
1 parent 7ea2ab5 commit 91ba096

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

defender-xdr/configure-attack-disruption.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,7 @@ The following are prerequisites for configuring automatic attack disruption in M
4545
The Minimum Sense Agent version required for the **Contain User** action to work is v10.8470. You can identify the Sense Agent version on a device by running the following PowerShell command:
4646

4747
> Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Advanced Threat Protection\' -Name "InstallLocation"
48+
> Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status' -Name "MsSenseDllVersion"
4849
4950
#### Automation setting for your organizations devices
5051

0 commit comments

Comments
 (0)