Forum Discussion
sumo83
Sep 24, 2024Iron Contributor
Suppress DEFENDER alerts for endpoint (Windows 10/11)
Hello, I am trying to find out whether there is a way to suppress Defender for endpoint notification in Windows 10/11. The reason is that we run security testing regularly and I do not want to ge...
sumo83
Sep 25, 2024Iron Contributor
the problem is that we run adversary emulations that runs modified malware etc... so lots of our testing is marked as "critical" by Defender. I need to disable notifications for the ones generated with our tests so that when, lets say a CEO is on a meeting, he is not getting multiple defender popups reporting threats...
The ones that are not triggered by our testing, I want them to work as usual -> defender notification will pop up
jbmartin6
Sep 25, 2024Iron Contributor
Why not suppress all AV alert popups? You will still get detection events through MDE alerts, this only affects end users seeing them. Surely you are not relying on your users to take some vital action when seeing the alert popup.
- sumo83Sep 25, 2024Iron Contributorwell... that's what I consider... However, as we are a small organization... I would like to train ppl to report unusual activities (of course, not relying on that only :))
If I cant filter it, I will probably disable it completely