Skip to content

defender-endpoint-demonstrations.md

Latest commit

 

History

History
70 lines (56 loc) · 4.43 KB

defender-endpoint-demonstrations.md

File metadata and controls

70 lines (56 loc) · 4.43 KB

title: Microsoft Defender for Endpoint demonstration scenarios description: Lists Microsoft Defender for Endpoint demonstration scenarios that you can run. search.appverid: met150 ms.service: defender-endpoint ms.author: lwainstein author: limwainstein ms.reviewer: yongrhee ms.localizationpriority: medium manager: bagol audience: ITPro ms.collection:

  • m365-security
  • tier2
  • demo ms.topic: article ms.subservice: ngp ms.date: 10/16/2024 appliesto:
    • Microsoft Defender for Business
    • Microsoft Defender for Individuals
    • Microsoft Defender Antivirus

Microsoft Defender for Endpoint - demonstration scenarios

Demonstration scenarios help you learn about the capabilities of Microsoft Defender for Endpoint on Windows, Mac, and Linux. Demonstration scenarios are provided for the following Microsoft Defender for Endpoint protection areas:

  • Attack surface protection (ASR)
  • Next Generation Protection (NGP)
  • Endpoint detection and response (EDR)

:::image type="content" source="media/microsoft-defender-for-endpoint-cloud-protection.png" alt-text="Shows the areas of Microsoft Defender for Endpoint demonstration scenarios covered in this collection" lightbox="media/microsoft-defender-for-endpoint-cloud-protection.png":::

Note

None of the sample files or suspicious links provided in this collection are actually malicious; all links and demonstration files are harmless.

We encourage you to read Microsoft Defender Antivirus documentation, and to download the Evaluation guide.

Demonstrations

The following table lists the available demonstrations alphabetically, with their associated protection area.

Demonstration name Protection area Description
AMSI demonstrations NGP Confirm that an AMSI script is detected and blocked.
Antimalware validation NGP Confirm that antivirus/antimalware is detecting and blocking malware.
Attack surface reduction rules demonstrations ASR Download sample files to trigger each ASR rule.
App reputation demonstration NGP Navigate to the app reputation page to see the demonstration scenario using Microsoft Edge.
Behavior Monitoring demonstration NGP Confirm that behavior monitoring is detecting and blocking malware.
Cloud-delivered protection demonstration NGP Confirm that cloud-delivered protection is working properly on your computer.
Controlled folder access (CFA) demonstration (block script) ASR Download the CFA test tool.
Controlled folder access (CFA) demonstrations (block ransomware) ASR Download and execute a sample file to trigger CFA ransomware protection.
Endpoint Detection and Response (EDR) detections EDR Confirm that EDR is detecting cyber threats such as malware.
Exploit protection (EP) demonstrations ASR Apply custom exploit protection settings.
Network protection demonstrations ASR Navigate to a suspicious URL to trigger network protection.
Potentially unwanted applications (PUA) demonstration NGP Confirm that potentially unwanted applications (PUAs) are being blocked on your network by downloading a fake (safe) PUA file.
URL reputation demonstrations NGP Navigate to the URL Reputation page to see the demonstration scenarios using Microsoft Edge.

See also

Attack surface protection overview Test attack surface reduction rules Next Generation Protection overview Endpoint detection and response overview Microsoft Defender for Endpoint security blog