Samples reporting - provides and reports samples to the Microsoft Antimalware service to help refine the service and enable troubleshooting.Įxclusions – allows application and service administrators to configure exclusions for files, processes, and drives.Īntimalware event collection - records the antimalware service health, suspicious activities, and remediation actions taken in the operating system event log and collects them into the customer's Azure Storage account. Signature updates - automatically installs the latest protection signatures (virus definitions) to ensure protection is up-to-date on a pre-determined frequency.Īntimalware Engine updates – automatically updates the Microsoft Antimalware engine.Īntimalware Platform updates – automatically updates the Microsoft Antimalware platform.Īctive protection - reports telemetry metadata about detected threats and suspicious resources to Microsoft Azure to ensure rapid response to the evolving threat landscape, as well as enabling real-time synchronous signature delivery through the Microsoft Active Protection System (MAPS). Malware remediation - automatically takes action on detected malware, such as deleting or quarantining malicious files and cleaning up malicious registry entries. Scheduled scanning - Scans periodically to detect malware, including actively running programs.

Real-time protection - monitors activity in Cloud Services and on Virtual Machines to detect and block malware execution.

Microsoft antimalware