Skip to content

Commit aaaf88b

Browse files
authored
Merge branch 'main' into 76b79546-5b4e-47d7-91fa-6f3f0cbf1b9d_97
2 parents 079963a + 2681f59 commit aaaf88b

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

41 files changed

+58
-58
lines changed

defender-endpoint/attack-surface-reduction-rules-deployment.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ ms.author: deniseb
1010
ms.reviewer: sugamar
1111
manager: deniseb
1212
ms.custom: asr
13-
ms.topic: conceptual
13+
ms.topic: concept-article
1414
ms.collection:
1515
- m365-security
1616
- m365solution-asr-rules

defender-endpoint/collect-diagnostic-data.md

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.localizationpriority: medium
66
author: emmwalshh
77
ms.author: ewalsh
88
ms.custom: nextgen
9-
ms.date: 04/04/2025
9+
ms.date: 06/06/2025
1010
ms.reviewer: pahuijbr, yongrhee
1111
manager: deniseb
1212
ms.subservice: ngp
@@ -26,13 +26,9 @@ search.appverid: met150
2626
**Applies to:**
2727

2828
- [Microsoft Defender for Endpoint Plan 2](microsoft-defender-endpoint.md)
29-
3029
- [Microsoft Defender for Business](https://www.microsoft.com/security/business/endpoint-security/microsoft-defender-business)
31-
3230
- [Microsoft Defender for Endpoint Plan 1](microsoft-defender-endpoint.md)
33-
3431
- Microsoft Defender Antivirus
35-
3632
- [Microsoft Defender for Individuals](https://www.microsoft.com/microsoft-365/microsoft-defender-for-individuals)
3733

3834
This article describes how to collect diagnostic data that's used by Microsoft support and engineering teams when they help troubleshoot issues with Microsoft Defender Antivirus.
@@ -48,23 +44,26 @@ On at least two devices that are experiencing the same issue, obtain the `.cab`
4844

4945
1. Open Command Prompt as an administrator by following these steps:
5046

51-
a. Open the **Start** menu.
52-
53-
b. Type **cmd**. Right-click on **Command Prompt** and then select **Run as administrator**.
54-
55-
c. Specify administrator credentials or approve the prompt.
56-
47+
a. Open the **Start** menu.
48+
49+
b. Type **cmd**. Right-click on **Command Prompt** and then select **Run as administrator**.
50+
51+
c. Specify administrator credentials or approve the prompt.
52+
5753
1. Navigate to the directory for Microsoft Defender Antivirus:
5854

5955
`cd C:\ProgramData\Microsoft\Windows Defender\Platform\<version>`
60-
56+
6157
Where `<version>` is the actual version that starts with `4.18.2xxxx.x`
6258

59+
> [!NOTE]
60+
> `C:\ProgramData` is a hidden folder. If you don't have a folder that starts with `4.18.2xxxx.x` in `C:\ProgramData\Microsoft\Windows Defender\Platform\`, then you will need to go to `C:\Program Files\Windows Defender\`.
61+
6362
1. Type the following command, and then press **Enter**
6463

65-
```Dos
66-
mpcmdrun.exe -GetFiles
67-
```
64+
```Dos
65+
mpcmdrun.exe -GetFiles
66+
```
6867

6968
4. A `.cab` file is generated that contains various diagnostic logs. The location of the file is specified in the output in the command prompt. By default, the location is `C:\ProgramData\Microsoft\Windows Defender\Support\MpSupportFiles.cab`.
7069

@@ -87,7 +86,7 @@ mpcmdrun.exe -GetFiles -SupportLogLocation <path>
8786

8887
Copies the diagnostic data to the specified path. If the path isn't specified, the diagnostic data is copied to the location specified in the Support Log Location Configuration.
8988

90-
When the SupportLogLocation parameter is used, a folder structure like as follows will be created in the destination path:
89+
When the `SupportLogLocation` parameter is used, a folder structure like as follows will be created in the destination path:
9190

9291
```Dos
9392
<path>\<MMDD>\MpSupport-<hostname>-<HHMM>.cab
@@ -122,7 +121,8 @@ You can also specify where the diagnostic `.cab` file is created using a Group P
122121
3. Inside the policy editor, select **Enabled**.
123122

124123
4. Specify the directory path where you want to copy the support log files in the **Options** field.
125-
:::image type="content" source="media/GPO3-SupportLogLocationGPPageEnabledExample.png" alt-text="The Enabled directory path custom setting" lightbox="media/GPO3-SupportLogLocationGPPageEnabledExample.png":::
124+
125+
:::image type="content" source="media/GPO3-SupportLogLocationGPPageEnabledExample.png" alt-text="Screenshot showing the enabled directory path custom setting." lightbox="media/GPO3-SupportLogLocationGPPageEnabledExample.png":::
126126

127127
5. Select **OK** or **Apply**.
128128

@@ -142,7 +142,7 @@ You can also specify where the diagnostic `.cab` file is created using a Group P
142142
>
143143
> You can use the information gathered using Performance analyzer to better assess performance issues and apply remediation actions.
144144
> See: [Performance analyzer for Microsoft Defender Antivirus](tune-performance-defender-antivirus.md).
145-
>
145+
146146

147147
## See also
148148

defender-endpoint/configure-endpoints-gp.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ ms.collection:
1111
- m365-security
1212
- tier1
1313
ms.custom: admindeeplinkDEFENDER
14-
ms.topic: conceptual
14+
ms.topic: install-set-up-deploy
1515
ms.date: 02/04/2025
1616
ms.subservice: onboard
1717
search.appverid: met150

defender-endpoint/configure-endpoints-mdm.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ ms.collection:
1111
- m365-security
1212
- tier1
1313
ms.custom: admindeeplinkDEFENDER
14-
ms.topic: conceptual
14+
ms.topic: install-set-up-deploy
1515
ms.subservice: onboard
1616
search.appverid: met150
1717
ms.date: 10/31/2024

defender-endpoint/configure-endpoints-sccm.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ ms.collection:
1111
- m365-security
1212
- tier1
1313
ms.custom: admindeeplinkDEFENDER
14-
ms.topic: conceptual
14+
ms.topic: install-set-up-deploy
1515
ms.date: 12/13/2024
1616
ms.subservice: onboard
1717
search.appverid: met150

defender-endpoint/configure-endpoints-vdi.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ ms.collection:
1313
- m365-security
1414
- tier2
1515
ms.custom: admindeeplinkDEFENDER
16-
ms.topic: conceptual
16+
ms.topic: install-set-up-deploy
1717
ms.date: 03/11/2025
1818
ms.subservice: onboard
1919
---

defender-endpoint/configure-machines.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ ms.collection:
1111
- m365-security
1212
- tier2
1313
ms.custom: admindeeplinkDEFENDER
14-
ms.topic: conceptual
14+
ms.topic: install-set-up-deploy
1515
ms.subservice: onboard
1616
search.appverid: met150
1717
ms.date: 08/29/2024

defender-endpoint/deployment-strategy.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ audience: ITPro
1010
ms.collection:
1111
- m365-security
1212
- tier1
13-
ms.topic: conceptual
13+
ms.topic: install-set-up-deploy
1414
ms.subservice: onboard
1515
search.appverid: met150
1616
ms.date: 04/17/2025

defender-endpoint/investigate-incidents.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ ms.collection:
1212
- m365-security
1313
- tier1
1414
- mde-edr
15-
ms.topic: conceptual
15+
ms.topic: concept-article
1616
ms.subservice: edr
1717
ms.date: 06/05/2024
1818
---

defender-endpoint/ios-install-unmanaged.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ ms.collection:
1212
- m365-security
1313
- tier3
1414
- mde-ios
15-
ms.topic: conceptual
15+
ms.topic: install-set-up-deploy
1616
ms.subservice: ios
1717
search.appverid: met150
1818
ms.date: 03/06/2025

0 commit comments

Comments
 (0)