After an update, Microsoft Defender shows you comprehensive information about files, including their distribution in your organization.

Microsoft Defender, Windows’ built-in antivirus solution, is getting a major upgrade. Product manager Oren Saban announces this in a blog. The antivirus launches a brand new files page that security teams can use to take a close look at a file. This should help them to assess the risk of a stock and, if necessary, to stop its further spread.

The file page shows you, among other things, how widespread the file is in your organization. The statistics show on how many devices or cloud applications within the organization the file was noticed over a thirty-day period. This data can be recalled up to half a year if you want to know exactly when a file was received.

study behavior

It’s important to know where a file circulates in your organization, but it’s even more important to assess a file’s potential risk. The new file page also allows security teams to perform deeper analysis of the file, even if it hasn’t already been run on a device.

This provides insight into the “behavior” of a file, such as B. Network activity and processes being written and/or read. This allows security teams to decide whether to stop the file after thorough analysis. For more information on what you can do with the new files page and how to access it, see this blog.

Thanks to this upgrade, Microsoft Defender offers a little more security again. It is therefore not surprising that the built-in solution is by far the most popular antivirus among business Windows users.