Skip to content
Merged
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions defender-endpoint/linux-preferences.md
Original file line number Diff line number Diff line change
Expand Up @@ -63,6 +63,7 @@ Specifies the enforcement preference of antivirus engine. There are three values
- Real-time (`real_time`): Real-time protection (scan files as they're modified) is enabled.
- On-demand (`on_demand`): Files are scanned only on demand. In this:
- Real-time protection is turned off.
- Definition updates occur only when a scan starts, even if `automaticDefinitionUpdateEnabled` is set to `true` in on-demand mode.
- Passive (`passive`): Runs the antivirus engine in passive mode. In this case, all of the following apply:
- Real-time protection is turned off: Threats are not remediated by Microsoft Defender Antivirus.
- On-demand scanning is turned on: Still use the scan capabilities on the endpoint.
Expand Down Expand Up @@ -627,6 +628,7 @@ Determines whether security intelligence updates are installed automatically:
|**Data type**|Boolean|Drop down|
|**Possible values**|`true` (default) <p>`false`|Not configured<br>Disabled<br>Enabled (Default)|

Depending on the enforcement level, the automatic security intelligence updates are installed differently. In RTP mode, updates are installed periodically. In Passive/ On-Demand mode updates are installed before every scan.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Instead of "updates are installed" ==> "Security Intelligence updates are updated/installed before every scan"


### Advanced optional features

Expand Down