Windows10EndpointProtectionConfiguration.Builder |
Windows10EndpointProtectionConfiguration.Builder.defenderBlockPersistenceThroughWmiType(DefenderAttackSurfaceType defenderBlockPersistenceThroughWmiType) |
“Value indicating the behavior of Block persistence through WMI event
subscription”
|
Windows10EndpointProtectionConfiguration.Builder |
Windows10EndpointProtectionConfiguration.Builder.defenderEmailContentExecutionType(DefenderAttackSurfaceType defenderEmailContentExecutionType) |
“Value indicating if execution of executable content (exe, dll, ps, js, vbs, etc)
should be dropped from email (webmail/mail-client)”
|
Windows10EndpointProtectionConfiguration.Builder |
Windows10EndpointProtectionConfiguration.Builder.defenderOfficeAppsExecutableContentCreationOrLaunchType(DefenderAttackSurfaceType defenderOfficeAppsExecutableContentCreationOrLaunchType) |
“Value indicating the behavior of Office applications/macros creating or
launching executable content”
|
Windows10EndpointProtectionConfiguration.Builder |
Windows10EndpointProtectionConfiguration.Builder.defenderOfficeAppsLaunchChildProcessType(DefenderAttackSurfaceType defenderOfficeAppsLaunchChildProcessType) |
“Value indicating the behavior of Office application launching child processes”
|
Windows10EndpointProtectionConfiguration.Builder |
Windows10EndpointProtectionConfiguration.Builder.defenderOfficeAppsOtherProcessInjectionType(DefenderAttackSurfaceType defenderOfficeAppsOtherProcessInjectionType) |
“Value indicating the behavior of Office applications injecting into other
processes”
|
Windows10EndpointProtectionConfiguration.Builder |
Windows10EndpointProtectionConfiguration.Builder.defenderOfficeMacroCodeAllowWin32ImportsType(DefenderAttackSurfaceType defenderOfficeMacroCodeAllowWin32ImportsType) |
“Value indicating the behavior of Win32 imports from Macro code in Office”
|
Windows10EndpointProtectionConfiguration.Builder |
Windows10EndpointProtectionConfiguration.Builder.defenderProcessCreationType(DefenderAttackSurfaceType defenderProcessCreationType) |
“Value indicating response to process creations originating from PSExec and WMI
commands”
|
Windows10EndpointProtectionConfiguration.Builder |
Windows10EndpointProtectionConfiguration.Builder.defenderScriptDownloadedPayloadExecutionType(DefenderAttackSurfaceType defenderScriptDownloadedPayloadExecutionType) |
“Value indicating the behavior of js/vbs executing payload downloaded from
Internet”
|
Windows10EndpointProtectionConfiguration.Builder |
Windows10EndpointProtectionConfiguration.Builder.defenderScriptObfuscatedMacroCodeType(DefenderAttackSurfaceType defenderScriptObfuscatedMacroCodeType) |
“Value indicating the behavior of obfuscated js/vbs/ps/macro code”
|
Windows10EndpointProtectionConfiguration.Builder |
Windows10EndpointProtectionConfiguration.Builder.defenderUntrustedExecutableType(DefenderAttackSurfaceType defenderUntrustedExecutableType) |
“Value indicating response to executables that don't meet a prevalence, age, or
trusted list criteria”
|
Windows10EndpointProtectionConfiguration.Builder |
Windows10EndpointProtectionConfiguration.Builder.defenderUntrustedUSBProcessType(DefenderAttackSurfaceType defenderUntrustedUSBProcessType) |
“Value indicating response to untrusted and unsigned processes that run from USB”
|
Windows10EndpointProtectionConfiguration |
Windows10EndpointProtectionConfiguration.withDefenderBlockPersistenceThroughWmiType(DefenderAttackSurfaceType defenderBlockPersistenceThroughWmiType) |
Returns an immutable copy of this with just the
defenderBlockPersistenceThroughWmiType field changed.
|
Windows10EndpointProtectionConfiguration |
Windows10EndpointProtectionConfiguration.withDefenderEmailContentExecutionType(DefenderAttackSurfaceType defenderEmailContentExecutionType) |
Returns an immutable copy of this with just the
defenderEmailContentExecutionType field changed.
|
Windows10EndpointProtectionConfiguration |
Windows10EndpointProtectionConfiguration.withDefenderOfficeAppsExecutableContentCreationOrLaunchType(DefenderAttackSurfaceType defenderOfficeAppsExecutableContentCreationOrLaunchType) |
Returns an immutable copy of this with just the
defenderOfficeAppsExecutableContentCreationOrLaunchType field changed.
|
Windows10EndpointProtectionConfiguration |
Windows10EndpointProtectionConfiguration.withDefenderOfficeAppsLaunchChildProcessType(DefenderAttackSurfaceType defenderOfficeAppsLaunchChildProcessType) |
Returns an immutable copy of this with just the
defenderOfficeAppsLaunchChildProcessType field changed.
|
Windows10EndpointProtectionConfiguration |
Windows10EndpointProtectionConfiguration.withDefenderOfficeAppsOtherProcessInjectionType(DefenderAttackSurfaceType defenderOfficeAppsOtherProcessInjectionType) |
Returns an immutable copy of this with just the
defenderOfficeAppsOtherProcessInjectionType field changed.
|
Windows10EndpointProtectionConfiguration |
Windows10EndpointProtectionConfiguration.withDefenderOfficeMacroCodeAllowWin32ImportsType(DefenderAttackSurfaceType defenderOfficeMacroCodeAllowWin32ImportsType) |
Returns an immutable copy of this with just the
defenderOfficeMacroCodeAllowWin32ImportsType field changed.
|
Windows10EndpointProtectionConfiguration |
Windows10EndpointProtectionConfiguration.withDefenderProcessCreationType(DefenderAttackSurfaceType defenderProcessCreationType) |
Returns an immutable copy of this with just the
defenderProcessCreationType field changed.
|
Windows10EndpointProtectionConfiguration |
Windows10EndpointProtectionConfiguration.withDefenderScriptDownloadedPayloadExecutionType(DefenderAttackSurfaceType defenderScriptDownloadedPayloadExecutionType) |
Returns an immutable copy of this with just the
defenderScriptDownloadedPayloadExecutionType field changed.
|
Windows10EndpointProtectionConfiguration |
Windows10EndpointProtectionConfiguration.withDefenderScriptObfuscatedMacroCodeType(DefenderAttackSurfaceType defenderScriptObfuscatedMacroCodeType) |
Returns an immutable copy of this with just the
defenderScriptObfuscatedMacroCodeType field changed.
|
Windows10EndpointProtectionConfiguration |
Windows10EndpointProtectionConfiguration.withDefenderUntrustedExecutableType(DefenderAttackSurfaceType defenderUntrustedExecutableType) |
Returns an immutable copy of this with just the
defenderUntrustedExecutableType field changed.
|
Windows10EndpointProtectionConfiguration |
Windows10EndpointProtectionConfiguration.withDefenderUntrustedUSBProcessType(DefenderAttackSurfaceType defenderUntrustedUSBProcessType) |
Returns an immutable copy of this with just the
defenderUntrustedUSBProcessType field changed.
|