Files
Anthropic-Cybersecurity-Skills/skills/configuring-windows-defender-advanced-settings/references/api-reference.md
T
mukul975 c21af3347e Complete folder anatomy for all 649 cybersecurity skills + update LICENSE to Mahipal
- Add scripts/agent.py and references/api-reference.md to all remaining skills
- Update all 648 LICENSE files: copyright now reads 'Mahipal'
- Add implementing-security-monitoring-with-datadog (new skill with full anatomy)
- All 649 skills now have: SKILL.md, LICENSE, scripts/agent.py, references/api-reference.md
2026-03-11 00:22:12 +01:00

1.3 KiB

Windows Defender Advanced Settings — API Reference

PowerShell Cmdlets

Cmdlet Description
Get-MpComputerStatus Defender service status, signature version
Get-MpPreference All Defender configuration preferences
Set-MpPreference Modify Defender settings
Get-MpThreatDetection Recent threat detections
Add-MpPreference -AttackSurfaceReductionRules_Ids Enable ASR rules

Critical ASR Rule GUIDs

GUID Rule
be9ba2d9-53ea-4cdc-84e5-9b1eeee46550 Block executable from email
d4f940ab-401b-4efc-aadc-ad5f3c50688a Block Office child processes
3b576869-a4ec-4529-8536-b80a7769e899 Block Office executable creation
5beb7efe-fd9a-4556-801d-275e5ffc04cc Block obfuscated scripts
56a863a9-875e-4185-98a7-b882c64b5ce5 Block exploited signed drivers

ASR Rule Actions

Value Action
0 Disabled
1 Block
2 Audit
6 Warn

External References