Whether passive mode is enabled on the device or not. Whether real-time protection is enabled on the device or not. The following fields are collected: FieldĪntivirus_engine.enable_real_time_protection Allows Microsoft to identify on which release ring an issue may be occurring so that it can correctly be prioritized. Ring that the device is associated with (for example Insider Fast, Insider Slow, Production). Allows Microsoft to understand what types of compressions can be used when it communicates with the application.

List of compression algorithms supported by the application, for example. Allows Microsoft to identify which versions of the security intelligence are showing an issue so that it can correctly be prioritized. Version of security intelligence database.

Allows Microsoft to identify which versions of the product are showing an issue so that it can correctly be prioritized. Version of the Microsoft Defender ATP for Mac application. Allows Microsoft to differentiate issues impacting different flavors of the product. Allows Microsoft to identify whether issues are impacting a select set of installs and how many users are impacted. Allows Microsoft to identify whether issues are impacting a select set of enterprises and how many enterprises are impacted. Unique identifier associated with the enterprise that the device belongs to. Unique identifier associated with the device. Allows Microsoft to identify on which platforms an issue may be occurring so that it can correctly be prioritized. The broad classification of the platform on which the app is running. The following fields are considered common for all events: Field

Microsoft defender for mac download