Skip to content

Commit c90601b

Browse files
committed
Learn Editor: Update indicator-file.md
1 parent 68087fd commit c90601b

File tree

1 file changed

+13
-1
lines changed

1 file changed

+13
-1
lines changed

defender-endpoint/indicator-file.md

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,8 +57,16 @@ Understand the following prerequisites before you create indicators for files:
5757

5858
- This feature is available if your organization uses [Microsoft Defender Antivirus](microsoft-defender-antivirus-windows.md) (in active mode)
5959
- The antimalware client version must be `4.18.1901.x` or later. See [Monthly platform and engine versions](microsoft-defender-antivirus-updates.md#platform-and-engine-releases)
60+
6061
- This feature is supported on devices running Windows 10, version 1703 or later, Windows 11, Windows Server 2012 R2, Windows Server 2016 or later, Windows Server 2019, Windows Server 2022, and Windows Server 2025.
61-
- File hash computation is enabled, by setting `Computer Configuration\Administrative Templates\Windows Components\Microsoft Defender Antivirus\MpEngine\` to **Enabled**
62+
- File hash computation is enabled, by setting `Computer Configuration\Administrative Templates\Windows Components\Microsoft Defender Antivirus\MpEngine\Enable File Hash Computation` to **Enabled**
63+
64+
Alternatively, use one of these two ways to enable File hash computation:
65+
Run the following command: `Set-MpPreference -EnableFileHashComputation $true`
66+
67+
```cmd
68+
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\MpEngine" /v "EnableFileHashComputation" /t REG_DWORD /d 1 /f
69+
```
6270

6371
> [!NOTE]
6472
> File indicators support portable executable (PE) files, including `.exe` and `.dll` files only.
@@ -201,9 +209,13 @@ Microsoft Defender Vulnerability Management's block vulnerable application featu
201209
## See also
202210

203211
- [Create indicators](indicators-overview.md)
212+
204213
- [Create indicators for IPs and URLs/domains](indicator-ip-domain.md)
214+
205215
- [Create indicators based on certificates](indicator-certificates.md)
216+
206217
- [Manage indicators](indicator-manage.md)
218+
207219
- [Exclusions for Microsoft Defender for Endpoint and Microsoft Defender Antivirus](defender-endpoint-antivirus-exclusions.md)
208220

209221
[!INCLUDE [Microsoft Defender for Endpoint Tech Community](../includes/defender-mde-techcommunity.md)]

0 commit comments

Comments
 (0)