Conventions used

There are a number of text conventions used throughout this book.

Code in text: Indicates code words in text, database table names, folder names, filenames, file extensions, pathnames, dummy URLs, user input, and Twitter handles. Here is an example: “A file named MDMDiagReport.html will be created in the specified directory.”

A block of code is set as follows:

DeviceEvents
| where ActionType in
('ControlledFolderAccessViolationAudited',
'ControlledFolderAccessViolationBlocked')

When we wish to draw your attention to a particular part of a code block, the relevant lines or items are set in bold:

    ConfigurationId == "scid-2012", "RealtimeProtection",
    ConfigurationId == "scid-91", "BehaviorMonitoring",
    ConfigurationId == "scid-2013", "PUAProtection",
    ConfigurationId == "scid-2014", "AntivirusReporting",
    ConfigurationId == "scid-2016", "CloudProtection",

Any command-line input or output is written as follows:

sudo mdatp config real-time-protection --value disabled

Bold: Indicates a new term, an important word, or words that you see onscreen. For instance, words in menus or dialog boxes appear in bold. Here is an example: “Alternatively, use Settings | Home | Accounts | Access work or school | Info | Create report.”

Tips or important notes

Appear like this.