About Defender's Console Display

Copper Contributor

I currently use Defender for Endpoint.
In the left side of the menu of Defender's administration page, there is an "Alerts" section under "Incidents and Alerts." Does this "Alerts" section show alerts that violate the policies set by Exploit Protection?

 

I have not been able to find any information on a website that describes the above information and would appreciate it if you could provide it to me.

Thank you in advance.

1 Reply
It does not. The events are collected, if you really want alerts on them you would have to make your own custom detections. I wouldn't do it though, they will be very false positive prone.