Forum Discussion

T-800's avatar
T-800
Copper Contributor
Dec 01, 2023

EDR Block

Hello,

 

I didn't think Defender will remediate and quarantine file, if Defender is running in passive mode.  We have Defender in passive mode because of other EDR product.  EDR Block is disabled yet it quarantined a malware?  I didn't think that was possible unless EDR Block is Enabled.

 

Thanks.   

  • BillClarksonAntill's avatar
    BillClarksonAntill
    Iron Contributor
    Dec 04, 2023

    Hey T-800 

     

    Check out this link here

     

    It might pay to check to see if EDR has been turned on or not. Regardless if MDE is in passive mode or not, if EDR has been turned on it will quarantee malware as it detects it and it will work in conjuction with another AV

Resources