Advanced Microsoft Defender Antivirus for Windows

Our dive into MDAV continues in this chapter. In the previous chapter, you learned about some of its basic features, such as scanning and exclusion management. In this chapter, we take a closer look under the hood at the capabilities that really make MDAV powerful.

You will learn about the following:

• How cloud-delivered protection improves MDAV’s layered approach to endpoint security
• How this manifests itself in features such as block at first sight (BAFS)
• The protection MDAV can provide against gray-area applications
• The different running modes for MDAV
• Tamper protection, important defense in your fight against unauthorized manipulation of MDAV, even by local administrators
• Ongoing management of MDAV – troubleshooting and reporting

To kick off our deep dive into MDAV’s additional features, we’ll start with one that sits at the heart of them all: cloud-delivered protection...