diff --git a/defender-xdr/configure-attack-disruption.md b/defender-xdr/configure-attack-disruption.md index a477fa2fc9..26f6004674 100644 --- a/defender-xdr/configure-attack-disruption.md +++ b/defender-xdr/configure-attack-disruption.md @@ -9,7 +9,7 @@ audience: ITPro ms.topic: how-to ms.service: defender-xdr ms.localizationpriority: medium -ms.date: 04/25/2025 +ms.date: 05/15/2025 ms.collection: - m365-security - tier2 @@ -45,6 +45,7 @@ The following are prerequisites for configuring automatic attack disruption in M The Minimum Sense Agent version required for the **Contain User** action to work is v10.8470. You can identify the Sense Agent version on a device by running the following PowerShell command: > Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Advanced Threat Protection\' -Name "InstallLocation" +> Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Advanced Threat Protection\Status' -Name "MsSenseDllVersion" #### Automation setting for your organizations devices