Forum Discussion
EDR in block mode using phased approach
HI Team Cannot we enable block mode on some machines and audit mode on some machines for ATP/EDR? In Mcafee and other vendors, we have an option to deploy EDR in audit mode on some machines and ...
Harithacissp EDR in block mode provides an additional layer of protections against malicious artifacts when Microsoft Defender Av is not the primary product and is running in passive mode. Please check the official document for more info
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/edr-in-block-mode?view=o365-worldwide