SOLVED

Intune + AMSI (Defender AV)

%3CLINGO-SUB%20id%3D%22lingo-sub-2456214%22%20slang%3D%22en-US%22%3EIntune%20%2B%20AMSI%20(Defender%20AV)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2456214%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EIs%20AMSI%20enabled%20by%20default%20in%20Defender%20AV%20or%20needs%20to%20be%20enabled%3F%20If%20so%20is%20there%20a%20control%20available%20in%20Intune%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2456214%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2456509%22%20slang%3D%22en-US%22%3ERE%3A%20Intune%20%2B%20AMSI%20(Defender%20AV)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2456509%22%20slang%3D%22en-US%22%3EAMSI%20was%20introduced%20with%20Windows%2010%20andd%20by%20default%20defender%20makes%20use%20of%20it%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fwin32%2Famsi%2Fhow-amsi-helps%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fwin32%2Famsi%2Fhow-amsi-helps%3C%2FA%3E%3C%2FLINGO-BODY%3E
Contributor

Is AMSI enabled by default in Defender AV or needs to be enabled? If so is there a control available in Intune?

2 Replies
best response confirmed by Pa_D (Contributor)
Solution
AMSI was introduced with Windows 10 andd by default defender makes use of it https://docs.microsoft.com/en-us/windows/win32/amsi/how-amsi-helps
I also got an confirmation from Microsoft PM.