Microsoft Defender Antivirus Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
Microsoft Defender AV must be configured to not exclude files opened by specified processes.
This policy setting allows the disabling of scheduled and real-time scanning for any file opened by any of the specified processes. The process itself will not be excluded. To exclude the process, ...Rule Medium Severity -
SRG-APP-000278
Group -
Microsoft Defender AV must be configured to enable the Automatic Exclusions feature.
This setting allows an administrator to specify if Automatic Exclusions feature for Server SKUs should be turned off.Rule Medium Severity -
SRG-APP-000210
Group -
Microsoft Defender AV must be configured to not allow override of behavior monitoring.
This policy setting configures a local override for the configuration of behavior monitoring. This setting can only be set by Group Policy. If this setting is enabled, the local preference setting ...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Capacity
Modules