From 532f0e2125f7449f9fa2822d8ef9f612090d2de7 Mon Sep 17 00:00:00 2001 From: wearetests <77985296+wearetests@users.noreply.github.com> Date: Thu, 19 Jun 2025 16:38:18 +0900 Subject: [PATCH 1/2] Update configure-real-time-protection-microsoft-defender-antivirus.md Slight difference on real-time protection when placing the file under Azure files or network share. Usually it is remediated just to place the file, but under Azure files or file share , the file has to be ran. --- ...figure-real-time-protection-microsoft-defender-antivirus.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/defender-endpoint/configure-real-time-protection-microsoft-defender-antivirus.md b/defender-endpoint/configure-real-time-protection-microsoft-defender-antivirus.md index 276a9b628d..3d3ffd95f5 100644 --- a/defender-endpoint/configure-real-time-protection-microsoft-defender-antivirus.md +++ b/defender-endpoint/configure-real-time-protection-microsoft-defender-antivirus.md @@ -33,6 +33,9 @@ Always-on protection consists of real-time protection, behavior monitoring, and > [!NOTE] > [Tamper protection](prevent-changes-to-security-settings-with-tamper-protection.md) helps keep always-on protection and other security settings from being changed. As a result, when tamper protection is enabled, any changes made to [tamper-protected settings](prevent-changes-to-security-settings-with-tamper-protection.md#what-happens-when-tamper-protection-is-turned-on) are ignored. If you must make changes to a device and those changes are blocked by tamper protection, we recommend using [troubleshooting mode](enable-troubleshooting-mode.md) to temporarily disable tamper protection on the device. Note that after troubleshooting mode ends, any changes made to tamper-protected settings are reverted to their configured state. +> +> Threat placed under the Azure file share will not be remediated just to place the file. +> The user has to run the file to be detected as real-time protection. ## Manage antivirus settings with Microsoft Intune From 3559b093aa65c2d3474ee46f47b1b38466c0e917 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Fri, 27 Jun 2025 10:31:23 -0700 Subject: [PATCH 2/2] Update configure-real-time-protection-microsoft-defender-antivirus.md --- ...ure-real-time-protection-microsoft-defender-antivirus.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/defender-endpoint/configure-real-time-protection-microsoft-defender-antivirus.md b/defender-endpoint/configure-real-time-protection-microsoft-defender-antivirus.md index 3d3ffd95f5..ffe11c67a4 100644 --- a/defender-endpoint/configure-real-time-protection-microsoft-defender-antivirus.md +++ b/defender-endpoint/configure-real-time-protection-microsoft-defender-antivirus.md @@ -8,7 +8,7 @@ author: emmwalshh ms.author: ewalsh ms.reviewer: yongrhee ms.topic: how-to -ms.date: 05/08/2025 +ms.date: 06/27/2025 manager: deniseb ms.custom: nextgen ms.collection: @@ -33,9 +33,7 @@ Always-on protection consists of real-time protection, behavior monitoring, and > [!NOTE] > [Tamper protection](prevent-changes-to-security-settings-with-tamper-protection.md) helps keep always-on protection and other security settings from being changed. As a result, when tamper protection is enabled, any changes made to [tamper-protected settings](prevent-changes-to-security-settings-with-tamper-protection.md#what-happens-when-tamper-protection-is-turned-on) are ignored. If you must make changes to a device and those changes are blocked by tamper protection, we recommend using [troubleshooting mode](enable-troubleshooting-mode.md) to temporarily disable tamper protection on the device. Note that after troubleshooting mode ends, any changes made to tamper-protected settings are reverted to their configured state. -> -> Threat placed under the Azure file share will not be remediated just to place the file. -> The user has to run the file to be detected as real-time protection. +> If a file that contains a threat is placed in an Azure file share, it's not remediated when placed. A user has to open the file for it to be detected by real-time protection. ## Manage antivirus settings with Microsoft Intune