Application question

[gd2020]

What is the best way to allow internal applications allow list / management  so that they wont be blocked by Defender

[#2]

You could use AV exclusions using MEM portal and if using ASR policies, there as well.
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-process-opened-f...

[#3]

Thank you