MZ����@���	�!�
L�!This program cannot be run in DOS mode.

$�;=ߍZS��ZS��ZS�Ӭ��ZS��Q��ZS�Rich�ZS�PEd�'}@0�" , 
�
@
�`
 �
"
(8.rdata�@@.rsrc 
 
@@'}@0
lPP'}@0$����8.rdata8.rdata$voltmdP�.rdata$zzzdbg .rsrc$01(�
.rsrc$02 u�Z|#�.�<i������ز�'�'}@0
��0�H��
��
�

�
�%
�
��
��
��(�?@�EX�Fp�G��H��L��R��S��~���0��H��`��x�9
��x
���
���
���
���
��
 ��
8��
P��
h��
���
���
���
���
��3��4�r(�

@�

X�
"p
"�
"�
"�
"�
"�
"�
"�
"�
"
"
" 
"0
"@
"P
"`
"p
"�
"�
"�
"�
"�
"�
"�
"�
"
"
" 
"0
"@
"P
"`
"p
"�
"�
"�
"�
"�
"�
"��'���(�
�P*�
��+�.�
��/8��1���2��H3���5���9���=��DA:��D��F��LX���hX�$n,�Pt:��z���`
�x�t����|�<
����
�d�
�p���4�����"���R�@��X
�
�<
2�p
N��!

��"
���)
��/
���6
��9
�MUI���
S��E
"��ƚa��ֶ��n���������MUIuk-UABCB@>1;5< =5 28O2;5=>.5<0T 4>:;04=8E 2V4><>AB59.>?><V6=V 40=V:
 V25=L 2?;82C	 57C;LB0B 5:><5=40FVO	>A8;0==OV43C:	0B53>@VO=0;V7><8;:0>?5@5465==O=D>@<0FV9=5 #2V<:=CB8 01> 28<:=CB8 =02V30FVN)V03=>AB8G=89 72VB ?@> 0=0;VB8:C Defender3;O45@5652V :><C=V:0FVW >73>@B0==O
@8T4=0==O
!?@02=VABLUpToDate@>1;5<8 7 ?@>4C:B82=VABN@>1;5<8 7 :>=DV3C@0FVTNCFA>2V4:05<0T5 =0;0HB>20=>%1�3>4.)>4=O54V;O	>=54V;>:V2B>@>:!5@540'5B25@ OB=8FO!C1>B0V:>;8"5AB8 <5@56528E :><C=V:0FV9"5AB8 @>73>@B0==O MDE"5AB8 ?@8T4=0==O MDE"5AB8 A?@02=>ABV DC=:FV9 MDE"5AB8 0:BC0;L=>ABV MDE"5AB8 ?@>4C:B82=>ABV"5AB8 :>=DV3C@0FVW%5@52V@:8 :5@>20=>3> 4>ABC?C 4> ?0?>:'5@52V@:8  (72C65==O 25:B>@V2 0B0:8)8<:=CB>01;>:C20B8
>=VB>@8=3
54>ABC?=>"!;C610 %1 2V4ACB=O
54>ABC?=>52V4><89 AB0=@>F5A$09;8:>=CTBLAOC?8=5=>@87C?8=5=>GV:C20==O 70?CA:CPAGV:C20==O 7C?8=5==OGV:C20==O ?@>4>265==OGV:C20==O ?@87C?8=5==O52V4><>020=B065==O	!8AB5<=892B><0B8G=>@CG=C8<:=CB>28G09=89 @V25=L0A82=89 @568<0A82=89 @568< SxS= 568< 1;>:C20==O 2 @0<:0E @>B84VW 703@>70< C :V=F528E B>G:0E0A82=89 @568< <>=VB>@8=3C5 28:>=CTBLAO
 57C;LB0B8
 57C;LB0B8O;0F=VBL ?>A8;0==O "=0;V7", I>1 ?5@53;O=CB8 4>:;04=V 2V4><>ABV ?@> @57C;LB0B8.PA=D>@<0FVO ?@> :><? NB5@=D>@<0FVO ?@> :><? NB5@VMNameVMSize
VMLocationSubscriptionId
ResourceGroupVmId	OSVersionV;L:VABL O45@V;L:VABL ;>3VG=8E ?@>F5A>@V20=FN6:8 =0 O4@>$V78G=0 ?0< OBL >7B0HC20==O D09;C 4>20=B065==O'>B>G=5 28:>@8AB0==O D09;C 4>20=B065==O,07>289 @>7<V@ 284V;5=>3> D09;C 4>20=B065==O&V:>25 28:>@8AB0==O D09;C 4>20=B065==O@8T4=0=> 4> 4><5=C@8T4=0=> 4> Azure AD@8T4=0=> 4> @>1>G>3> <VAFO45=B8DV:0B>@ ?@8AB@>N Azure AD!B0= @5TAB@0FVW@EVB5:BC@0 !'0A 7020=B065==O A8AB5<8!8AB5<=89 ?@>:AV-A5@25@ WinHTTP"@8AB@V9 70@5TAB@>20=> 2 AAD V MEM>@8AB@V9 =5 70@5TAB@>20=>, V 2V= =V:>;8 =5 1C2 70@5TAB@>20=89.@8AB@>T< :5@CT 035=B MDM@8AB@>T< :5@CT 035=B SCCM0@>1;5<0 :>=DV3C@0FVW Microsoft Endpoint Manager030;L=0 ?><8;:0@>1;5<0 7 ?V4:;NG5==O<4@8AB@V9 70@5TAB@>20=>, 0 B5?5@ A:0A>20=> @5TAB@0FVN(@8AB@V9 >GV:CT =0 A:0AC20==O @5TAB@0FVW><8;:0 ?@87=0G5==O ?>;VB8:PA><8;:0 72VBC ?@> ?>;VB8:8&030;L=0 ?><8;:0 3V1@84=>3> ?@8T4=0==O52V4?>2V4=VABL >A5@54:C)V1@84=0 ?><8;:0�  B>G:0 7 T4=0==O A;C618><8;:0 A5@B8DV:0B0$5?@028;L=0 :>=DV3C@0FVO AAD Connect><8;:0 A;C618 DNS @>1;5<0 A8=E@>=V70FVW 3>48==8:0MDE V ConfigMgrAB0==O A?@>10 ?5@52V@:8AB0==O CA?VH=0 ?5@52V@:0&AB0==T CA?VH=5 ?5@54020==O B5;5<5B@VW3supportedUris 4;O 70E8ABC <5@56V (2>AB0==T 7<V=5=>)9customSupportedUris 4;O 70E8ABC <5@56V (2>AB0==T 7<V=5=>)#@>B84VO 703@>70< C :V=F528E B>G:0E=D>@<0FVO ?@> Sense5@AVO Sense!B0= A;C618 Sense45=B8DV:0B>@ >@30=V70FVW45=B8DV:0B>@ ?@8AB@>N>;>10;L=89 C=V:0;L=89 V45=B8DV:0B>@ AB0=C 70E8ABC 2V4 V<VB0FV9!B0= A;C618 DiagTrack (UTC) >73>@=CB> 70E8AB 2V4 V<VB0FV95@AVO :>=DV3C@0FVW SenseMachineAuth IDStartType A;C618 Sense* >7B0HC20==O F5=B@C >1@>1:8 40=8E ?@8AB@>N1@8AB@V9 ?@8T4=0=> G5@57 >?B8<V7>20=5 ?V4:;NG5==O="8? 70?CA:C ?><VG=8:0 7V 2E>4C 4> >1;V:>2>3> 70?8AC MicrosoftPA=B82V@CA Defender!=D>@<0FVO ?@> =B82V@CA Defender!B0= A;C618 =B82V@CAC Defender$5@AVO ?;0BD>@<8 =B82V@CAC Defender55@AVO <5E0=V7<C 28O2;5==O 703@>7 =B82V@CAC Defender5@AVO O4@0 =B82V@CAC Defender 568< =B82V@CAC Defender/>=DV3C@0FVO ?0@0<5B@V2 SSL =B82V@CAC Defender/>=DV3C@0FVO ?@>:AV-A5@25@0 =B82V@CAC Defender$!B0= A;C618 F5=B@C 57?5:0 C Windows(!B0= A;C618 A?@02=>ABV 57?5:8 C WindowsPA(!B0= A;C618 <5@5652>W ?5@52V@:8 Defender!B0= >A=>2=>W A;C618 DefenderDefender 70E8I5=> 2V4 ?V4@>1>:%65@5;> 70E8ABC 2V4 ?V4@>1>: Defender'8=OB:8 70E8ABC 2V4 ?V4@>1>: C Defender 568< SmartLocker =B8H?83C=AL:0 ?@>3@0<0 Defender 568< 70E8ABC <5@56V DefenderPAx5@52V@B5 :>=DV3C@0FVN <5@56V B0 ?5@5:>=09B5AO, I> =5>1EV4=V URL-04@5A8 =5 701;>:>20=>. 
>:;04=V 2V4><>ABV 482. BCB: %1ServiceURLs�5@52V@:C ?V4:;NG5==O 4> URL-04@5A E<0@=>W A;C618 Microsoft Defender 4;O :V=F528E B>G>: (CNC) CA?VH=> 7025@H5=>. %1 7 @57C;LB0B>< %2�5 240;>AO ?5@52V@8B8 ?V4:;NG5==O 4> URL-04@5A E<0@=>W A;C618 Microsoft Defender 4;O :V=F528E B>G>: (CNC). 
5 240;>AO 28:>=0B8 ?5@52V@:C 4;O URL-04@5A8: %1 7 @57C;LB0B>< %2�#AV B5AB>2V ?V4:;NG5==O 4> URL-04@5A E<0@=8E A;C61 Microsoft Defender 4;O :V=F528E B>G>: (CNC) =5 ?@>945=>. 
5 240;>AO 28:>=0B8 ?5@52V@:C 4;O URL-04@5A8: %1 7 @57C;LB0B>< %2�5@52V@:C ?V4:;NG5==O 4> URL-04@5A E<0@=>W A;C618 Microsoft Defender 4;O :V=F528E B>G>: (Cyber) CA?VH=> 7025@H5=>. %1 7 @57C;LB0B>< %2�5 240;>AO ?5@52V@8B8 ?V4:;NG5==O 4> URL-04@5A E<0@=>W A;C618 Microsoft Defender 4;O :V=F528E B>G>: (Cyber). 
5 240;>AO 28:>=0B8 ?5@52V@:C 4;O URL-04@5A8: %1 7 @57C;LB0B>< %2�#AV B5AB>2V ?V4:;NG5==O 4> URL-04@5A E<0@=8E A;C61 Microsoft Defender 4;O :V=F528E B>G>: (Cyber) =5 ?@>945=>. 
5 240;>AO 28:>=0B8 ?5@52V@:C 4;O URL-04@5A8: %1 7 @57C;LB0B>< %2�5@52V@:C ?V4:;NG5==O 4> URL-04@5A E<0@=>W A;C618 Microsoft Defender 4;O :V=F528E B>G>: (AutoIR) CA?VH=> 7025@H5=>. %1 7 @57C;LB0B>< %2�5 240;>AO ?5@52V@8B8 ?V4:;NG5==O 4> URL-04@5A E<0@=>W A;C618 Microsoft Defender 4;O :V=F528E B>G>: (AutoIR). 
5 240;>AO 28:>=0B8 ?5@52V@:C 4;O URL-04@5A8: %1 7 @57C;LB0B>< %2�5 240;>AO 28:>=0B8 2AV ?5@52V@:8 ?V4:;NG5=L 4> URL-04@5A E<0@=8E A;C61 Microsoft Defender 4;O :V=F528E B>G>: (AutoIR). 
5 240;>AO 28:>=0B8 ?5@52V@:C 4;O URL-04@5A8: %1 7 @57C;LB0B>< %2�5@52V@:C ?V4:;NG5==O 4> URL-04@5A E<0@=>W A;C618 Microsoft Defender 4;O :V=F528E B>G>: (SampleUpload) CA?VH=> 7025@H5=>. %1 7 @57C;LB0B>< %2�5 240;>AO ?5@52V@8B8 ?V4:;NG5==O 4> URL-04@5A E<0@=>W A;C618 Microsoft Defender 4;O :V=F528E B>G>: (SampleUpload). 
5 240;>AO 28:>=0B8 ?5@52V@:C 4;O URL-04@5A8: %1 7 @57C;LB0B>< %2�5 240;>AO 28:>=0B8 2AV B5AB>2V ?V4:;NG5==O 4> URL-04@5A E<0@=8E A;C61 Microsoft Defender 4;O :V=F528E B>G>: (SampleUpload). 
5 240;>AO 28:>=0B8 ?5@52V@:C 4;O URL-04@5A8: %1 7 @57C;LB0B>< %2�5@52V@:C ?V4:;NG5==O 4> URL-04@5A E<0@=>W A;C618 Microsoft Defender 4;O :V=F528E B>G>: (MdeConfigMgr) CA?VH=> 7025@H5=>. %1 7 @57C;LB0B>< %2PA�5 240;>AO ?5@52V@8B8 ?V4:;NG5==O 4> URL-04@5A E<0@=>W A;C618 Microsoft Defender 4;O :V=F528E B>G>: (MdeConfigMgr). 
5 240;>AO 28:>=0B8 ?5@52V@:C 4;O URL-04@5A8: %1 7 @57C;LB0B>< %2�#AV ?5@52V@:8 ?V4:;NG5=L 4> URL-04@5A E<0@=8E A;C61 Microsoft Defender 4;O :V=F528E B>G>: (MdeConfigMgr) =5 ?@>945=>. 
5 240;>AO 28:>=0B8 ?5@52V@:C 4;O URL-04@5A8: %1 7 @57C;LB0B>< %2�5@52V@:C ?V4:;NG5==O 4> URL-04@5A E<0@=8E A;C61 Microsoft Defender 4;O :V=F528E B>G>: (OneD) CA?VH=> 7025@H5=>. %1 7 @57C;LB0B>< %2�5 240;>AO ?5@52V@8B8 ?V4:;NG5==O 4> URL-04@5A E<0@=>W A;C618 Microsoft Defender 4;O :V=F528E B>G>: (OneD). 
5 240;>AO 28:>=0B8 ?5@52V@:C 4;O URL-04@5A8: %1 7 @57C;LB0B>< %2�5 240;>AO 28:>=0B8 2AV ?5@52V@:8 ?V4:;NG5=L 4> URL-04@5A E<0@=8E A;C61 Microsoft Defender 4;O :V=F528E B>G>: (OneD). 
5 240;>AO 28:>=0B8 ?5@52V@:C 4;O URL-04@5A8: %1 7 @57C;LB0B>< %2W5@52V@:C A5@B8DV:0B0 4;O E<0@=>W A;C618 Defender 4;O :V=F528E B>G>: CA?VH=> 7025@H5=>.&V4:;8:0==O A5@B8DV:0B0 =5 ?5@52V@5=>.L%<0@=5 ?V4:;NG5==O <>65 1CB8 ?>@CH5=5 G5@57 ?><8;:8 2V4:;8:0==O A5@B8DV:0B0.�5@5:>=09B5AO, I> =0ABC?=V URL-04@5A8 =5 701;>:>20=>: %1 V %2. )>1 >B@8<0B8 4>40B:>2V 2V4><>ABV, 725@=VBLAO 4> %3. )>1 >B@8<0B8 4>:;04=V 2V4><>ABV ?@> ?><8;:C, ?5@53;O=LB5 %4.[5@52V@:C ?V4:;NG5==O 4> E<0@=>W A;C618 =B82V@CA 4;O Microsoft Defender CA?VH=> 7025@H5=>.V5 240;>AO ?5@52V@8B8 ?V4:;NG5==O 4> E<0@=>W A;C618 =B82V@CA0 4;O Microsoft Defender.s
/:I> =B82V@CA 4;O Microsoft Defender T 20H8< >A=>2=8< 0=B82V@CA=8< @VH5==O< 01> 28 28@VH8;8 22V<:=CB8 @568< 1;>:C20==O @>B84VW 703@>70< C :V=F528E B>G:0E (EDR), ?5@5:>=09B5AO, I> ?V4:;NG5==O 4> URL-04@5A E<0@8 AV =5 701;>:>20=>. >:;04=V 2V4><>ABV 482. =0 AB>@V=FV https://learn.microsoft.com/defender-endpoint/configure-network-connections-microsoft-defender-antivirus)>B>G=5 ?V4:;NG5==O 4> <5@56V =5 ;V<VB=5.)>B>G=5 ?V4:;NG5==O 4> <5@56V ;V<VB=5. %1�V<VB=V <5@56V <>6CBL >1<56C20B8 DC=:FV>=0;L=VABL C :><C=V:0FVOE V7 Defender MAPS, =0?@8:;04 70?8B8 =0 5:AB@5=V ?V4?8A8 =5 =04A8;0NBLAO (?>B@V1=V 4;O :>@8ABC20FL:8E V=48:0B>@V2 =0 4>40GC 4> 5:AB@5=8E ?V4?8AV2).ApproachingDataLimit: %1OverDataLimit: %1 >C<V=3: %1NetworkCostType: %1�5@52V@:C ?V4:;NG5==O 4> URL-04@5A E<0@=>W A;C618 Microsoft Defender 4;O :V=F528E B>G>: (:>=DV3C@0FVO ECS) CA?VH=> 7025@H5=>. %1 7 @57C;LB0B>< %2!
5@52V@:0 ?V4:;NG5==O 4> E<0@=>W A;C618 Microsoft Defender 4;O :V=F528E B>G>: (:>=DV3C@0FVO ECS) ?>25@=C;0 HTTP 502 "5?@028;L=89 H;N7". &5 2V4><0 B8<G0A>20 ?@>1;5<0 7V H;N7>< ?@>3@0<8 Azure, O:0 <>65 28@VH8B8AO A0<>ABV9=>. >2B>@VBL ?5@52V@:C, O:I> ?@>1;5<0 =5 7=8:=5. %1 7 @57C;LB0B>< %2�#AV B5AB>2V ?V4:;NG5==O 4> URL-04@5A E<0@=8E A;C61 Microsoft Defender 4;O :V=F528E B>G>: (:>=DV3C@0FVO ECS) =5 ?@>945=>. 
5 240;>AO 28:>=0B8 ?5@52V@:C 4;O URL-04@5A8: %1 7 @57C;LB0B>< %2�/:I> 28 ?;0=CTB5 C2V<:=CB8 :5@C20==O :>=DV3C@0FVTN 157?5:8 MDE 4;O :>=B@>;5@V2 4><5=C, 725@=VBLAO 4> =02545=>W =86G5 4>:C<5=B0FVW, I>1 ?5@53;O=CB8 A?8A>: 28<>3.V4B@8<C20=V ?;0BD>@<8h@8AB@V9 =5 <0T <V=V<0;L=>3> @V2=O 28?@02;5==O 4;O ?@8T4=0==O 4> :5@C20==O :>=DV3C@0FVTN 157?5:8 MDE: %1�0 ?@8AB@>W 2AB0=>2;5=> @>;L A;C61 V<5= Active Directory. V4B@8<:0 :>=B@>;5@V2 4><5=C =0@07V ?5@51C20T 2 @568<V ?V43>B>2G>W 25@AVW V 28<030T 4>40B:>2>W :>=DV3C@0FVW.�/:I> 28 ?;0=CTB5 C2V<:=CB8 :5@C20==O :>=DV3C@0FVTN 157?5:8 MDE 4;O :>=B@>;5@V2 4><5=C, 725@=VBLAO 4> =02545=>W =86G5 4>:C<5=B0FVW.@8:>@8AB0==O :5@C20==O ?0@0<5B@0<8 157?5:8 =0 :>=B@>;5@0E 4><5=C�@8AB@V9 ?@0FNT =0 32-@>7@O4=V9 >?5@0FV9=V9 A8AB5<V, O:0 =5 ?V4B@8<CTBLAO 4;O ?@8T4=0==O 4> :5@C20==O :>=DV3C@0FVTN 157?5:8 MDE.W25@=VBL C203C, I> 71V@:0 ! ?@8AB@>N =5 ?V4B@8<CTBLAO MDE V =5 <>65 1CB8 ?@8T4=0=0: %1:!?8A>: ?V4B@8<C20=8E 25@AV9 Windows =02545=> 2 FV9 AB0BBV.<%1 =0 FL><C ?@8AB@>W =5 ?@0FNT =0 >GV:C20=><C @V2=V 70E8ABC.�>:;04=V 2V4><>ABV ?@> 70E8AB PPL V ?@> B5, G><C F5 4C65 206;82>, 482. 2 FV9 4>:C<5=B0FVW. /:I> ?@>1;5<0 =5 7=8:=5, 725@=VBLAO 4> A;C618 ?V4B@8<:8 Microsoft.PPL|25@=VBL C203C, I> 2AB0=>2;5=0 =0 FL><C ?@8AB@>W A5@25@=0 @540:FVO Hyper-V =5 ?V4B@8<CTBLAO MDE V =5 <>65 1CB8 ?@8T4=0=0: %1_82. 4>:C<5=B0FVN "7 ?V4B@8<:>N MDE", I>1 ?5@53;O=CB8 A?8A>: ?V4B@8<C20=8E A5@25@=8E 28?CA:V2.V4B@8<C20=V 25@AVW Windows!;C610 MDE Sense!;C610 MDE 0=B82V@CAC Windefend!;C610 57?5:8 C Windows WscSvc!;C610 Windows SecurityHealth"!;C610 MDE 70E8ABC <5@56V WdnisSvc!B0= >A=>2=>W A;C618 DefenderPA!>:;04=V 2V4><>ABV 482. 2 AB0BBV.�25@=VBL C203C, I> =0 FL><C :><? NB5@V ?@0FNT 70AB0@V;0 25@AVO ?;0BD>@<8 Defender. 5@AVW ?;0BD>@<8, AB0@VHV 70 N-2, 1V;LH5 =5 ?V4B@8<C20B8<CBLAO.9;0BD>@<0 ?@>3@0<8 70E8ABC 2V4 2V@CAV2 Microsoft Defender
25@=VBL C203C, I> =0 FL><C :><? NB5@V ?@0FNT 70AB0@V;0 25@AVO =B82V@CA0 Defender. VA;O 28?CA:C =>2>W 25@AVW ?0:5B0 ?V4B@8<:0 42>E ?>?5@54=VE 25@AV9 72>48BLAO ;8H5 4> B5E=VG=8E ?8B0=L. 5@AVW, AB0@VHV 70 2:070=V 2 FL><C @>74V;V, =040NBLAO ;8H5 4;O B5E=VG=>W ?V4B@8<:8 7 >=>2;5==O."/4@> =B82V@CAC Microsoft Defender�25@=VBL C203C, I> =0 FL><C :><? NB5@V 28:>@8AB>2CTBLAO 70AB0@V;0 25@AVO <5E0=V7<C 28O2;5==O 703@>7. )>1 70157?5G8B8 >?B8<0;L=89 70E8AB V AC<VA=VABL, @5:><5=4CT<> 70AB>AC20B8 =09=>2VHC 25@AVN <5E0=V7<C 28O2;5==O 703@>7.2=>2;5==O 0=B82V@CA=>W ?@>3@0<8 Microsoft DefenderPAC8A>:5 28:>@8AB0==O & Sense A?>AB5@V30TBLAO G5@57 B@0DV: Sense NDR]!?@>1C9B5 70AB>AC20B8 28=OB:8 @>B84VW 703@>70< C :V=F528E B>G:0E Sense 4> B0:8E ?@>F5AV2: %18A>:5 28:>@8AB0==O &L;0BD>@<0 MDE 707=0;0 28A>:>3> 28:>@8AB0==O ?0< OBV 7 ?>B>G=8<8 25@AVO<8 MDE8A>:5 28:>@8AB0==O ?0< OBV><8;:8 >=>2;5==O ?;0BD>@<8 MDE><8;:8 >=>2;5==O O4@0 MDE><8;:8 >=>2;5==O ?V4?8AC MDEC=>2;5==O ?V4?8AC MDE =5 240TBLAO, >A:V;L:8 265 70?CI5=> 5:75<?;O@.[0G5:09B5, 4>:8 2AV ?@>F5A8 MpSigStub.exe 7025@H0BLAO, ?5@H =V6 ?>2B>@=> >=>2;N20B8 ?V4?8A.L5 240;>AO V=VFV0;V7C20B8 A;C61C MDE Windefend, V 2>=0 70AB@O3;0 =0 5B0?V %1�5@57020=B06B5 :><? NB5@ V >=>2VBL ?;0BD>@<C Defender 4> =09=>2VH>W 25@AVW, 0 O:I> ?@>1;5<0 =5 7=8:=5, ?>2V4><B5 ?@> F5 :>@?>@0FVN 09:@>A>DB.N5 240;>AO 7025@H8B8 @>1>BC A;C618 MDE Windefend, V 2>=0 70AB@O3;0 =0 5B0?V %1e=>2VBL ?;0BD>@<C Defender 4> =09=>2VH>W 25@AVW. /:I> ?@>1;5<0 =5 7=8:=5, ?>2V4><B5 ?@> F5 Microsoft.J8:;NG5==O MDE ?>A8;0TBLAO =0 7<V==V A5@54>28I0 (%1), O:V =5 T A8AB5<=8<8.b5@53;O=LB5 A2>W 28=OB:8:
%1
I>1 ?5@5:>=0B8AO, I> 2>=8 ?>A8;0NBLAO =0 ?@028;L=V 7<V==V A5@54>28I0.25 240;>AO >B@8<0B8 =0;0HBC20==O Defender Windows.�/:I> 28 ?;0=C20;8 2?@>2048B8 :5@C20==O :>=DV3C@0FVTN ?@8AB@>W2 MDE, 725@=VBLAO 4> =02545=>W =86G5 AB0BBV, I>1 >B@8<0B8 4>40B:>2V 2V4><>ABV.<5@5:>=09B5AO, I> A;C610 Defender Windows ?@0FNT V 4>ABC?=0.I0;0HBC20==O =B82V@CAC Microsoft Defender 70 4>?><>3>N 3@C?>2>W ?>;VB8:88<>38 4> ?V4:;NG5==OM0;0HBC20==O 3V1@84=8E ?@8T4=0=L Azure Active Directory 4;O :5@>20=8E 4><5=V2>@B0; 157?5:8 M365PAl#AC=5==O ?@>1;5< V7 ?@8T4=0==O<, ?>2 O70=8E V7 :5@C20==O< 157?5:>N 4;O Microsoft Defender 4;O :V=F528E B>G>:;NG AB0=40@B=8E ?>;VB8: MDE"!B0=40@B=89 :;NG A;C618 MDE Sensor%!B0=40@B=89 H;OE 4> :0B0;>3C :5H0 MDE&!B0=40@B=89 H;OE 4> :0B0;>3C MDE Cyber !B0=40@B=89 H;OE 4> :0B0;>3C MDE,!B0=40@B=89 H;OE 4> :0B0;>3C ProgramData MDE,!B0=40@B=89 H;OE 4> B8<G0A>2>3> :0B0;>3C MDE+!B0=40@B=89 H;OE 4> :0B0;>3C B@0AC20==O MDE�840;VBL @>74V;8 @5TAB@C, ?>2 O70=V V7 70E8AB>< 2V4 V<VB0FV9, I>1 ?@8AB@V9 AB2>@82 =>289 ?@820B=89 :;NG V ?>2B>@=> 70@5TAB@C202AO. 8:>=09B5 :><0=4C "%1"�5<0T 4V9 4;O 28:>=0==O. V4 G0A ?5@V>4C, I> ?>G8=0TBLAO 7 ?>4VW 70?CA:C Cyberthrottling, :V15@40=V =5 =04E>48;8 2 ?>@B0; MDATP.�&59 ?@8AB@V9 =0<0302AO 22V9B8 G5@57 035=B <>=VB>@8=3C Microsoft (MMA), 0;5 =5 7<V3 28:>=0B8 FN A?@>1C, >A:V;L:8 2V= =5 ?V4B@8<CT ?@8T4=0==O 70 4>?><>3>N FL>3> <5B>4C.�7=09><B5AO 7 =0H>N >=;09=>2>N 4>:C<5=B0FVTN, I>1 4V7=0B8AO, O:89 A?>AV1 ?@8T4=0==O ?V4E>48BL 4;O >?5@0FV9=>W A8AB5<8 FL>3> ?@8AB@>N.(V4B@8<C20=0 :>=DV3C@0FVO ?@8T4=0==O MDE:><? NB5@ ?>2 O70=> 7 ?52=8< V45=B8DV:0B>@>< >A5@54:C AAD.�5@5:>=09B5AO, I> V45=B8DV:0B>@ :;VT=B0 AAD C 20H><C >A5@54:C MDE 2V4?>2V40T V45=B8DV:0B>@C :;VT=B0 SCP, =02545=><C 28I5. )>1 ?5@53;O=CB8 V45=B8DV:0FVN 20H>3> >A5@54:C MDE, 725@=VBLAO 4> ?>@B0;C 157?5:8 M365.H@8AB@V9 ?V4B@8<CT 70E8AB 2V4 V<VB0FVW B0 ?5@51C20T 2 AB01V;L=><C AB0=V.ISharedSignatureRoot =0;0HB>20=> B0 4>ABC?=> 4;O >1;V:>2>3> 70?8AC SYSTEM.4>=DV3C@0FVO SharedSignatureRoot 283;O40T =>@<0;L=>.H=0G5==O @5TAB@C SharedSignatureRoot =5 =0;0HB>20=> 01> 2>=> =54>ABC?=5.o&5 V=D>@<0FV9=5 ?>2V4><;5==O�  ?5@52V@B5, G8 >GV:CTBLAO :>=DV3C@0FVO SharedSignatureRoot 4;O 20H>3> A5@54>28I0.+>=DV3C@0FVO @>7:;04C >=>2;5==O ?V4?8AC: %15SignatureScheduleDay: %1, SignatureUpdateInterval: %2[5@53;O=LB5 =0;0HBC20==O @>7:;04C >=>2;5==O ?V4?8AC 2V4?>2V4=> 4> ?>B@51 20H>3> A5@54>28I0.E0;0HBC20==O 70?;0=>20=8E ?5@52V@>: 4;O =B82V@CAC Microsoft Defender.SignatureDefinitionUpdateFileSharesSources: %1k5@53;O=LB5 =0;0HBC20==O 465@5; A?V;L=>3> 4>ABC?C 4> D09;V2 ?V4?8AC 2V4?>2V4=> 4> ?>B@51 20H>3> A5@54>28I0.SignatureFallbackOrder: %1T5@53;O=LB5 =0;0HBC20==O @575@2=>3> ?>@O4:C ?V4?8AC 2V4?>2V4=> 4> ?>B@51 A5@54>28I0.�25@=VBL C203C, I> =0 FL><C :><? NB5@V 4VT ?>;VB8:0, O:0 4>72>;OT 4>4020B8 ;8H5 =04V9=8E 28402FV2 =0 >A=>2V 4><5=C. &5 <>65 ?5@5H:>460B8 @>1>BV 40BG8:0 MDE, O:89 <0T V=AB0;N20B8 A5@B8DV:0B8 2 AE>28I5 =04V9=8E 28402FV2.�;O >B@8<0==O 4>40B:>2>W V=D>@<0FVW 725@=VBLAO 4> AB0BBV. 
)>1 C=8:=CB8 =5>GV:C20=8E ?@>1;5<, 2840;VBL ?>2'O70=C :>=DV3C@0FVN 3@C?>2>W ?>;VB8:8: ;>:0;L=V ?>7=0G:8 02B5=B8DV:0FVW = %1, ?>7=0G:8 02B5=B8DV:0FVW GP = %2.TrustedPublishers_5 240;>AO ?@>G8B0B8 B>G:C ?V4:;NG5==O 4> A;C618 (SCP) 7 @>74V;C :>=DV3C@0FVW Active Directory.F">G:0 ?V4:;NG5==O A;C618 (SCP) <VAB8BL =5?V4B@8<C20=C :>=DV3C@0FVN: %1F">G:0 ?V4:;NG5==O 4> A;C618 (SCP) <VAB8BL =5?V4B@8<C20=C :>=DV3C@0FVN.x@8AB@V9 =5 <>6=0 ?@8T4=0B8 4> Azure AD, >A:V;L:8 70?8A SCP =0;0HB>20=> =0 ?@8T4=0==O ?@8AB@>N 4> A;C618 Enterprise DRS.V">G:C ?V4:;NG5==O A;C618 (SCP) =5 =0;0HB>20=> 2 @>74V;V :>=DV3C@0FVW Active Directory.h5 240;>AO ?V4:;NG8B8AO 4> :>=B@>;5@0 4><5=C, I>1 >B@8<0B8 2V4><>ABV ?@> B>G:C ?V4:;NG5==O A;C618 (SCP).A=CT @>71V6=VABL <V6 V45=B8DV:0B>@>< >A5@54:C AAD V7 20H>3> >A5@54:C MDE 9 V45=B8DV:0B>@>< :;VT=B0 2 70?8AV SCP 20H>3> 4><5=C.�5@5:>=09B5AO, I> V45=B8DV:0B>@ :;VT=B0 AAD C 20H><C >A5@54:C MDE 2V4?>2V40T V45=B8DV:0B>@C :;VT=B0 SCP, =02545=><C 28I5. )>1 ?5@53;O=CB8 V45=B8DV:0FVN >A5@54:C MDE, 482. 4>:C<5=B0FVN.O@8AB@>T< :5@CT 035=B SCCM, V =8< =5 :5@C20B8<5 @VH5==O :5@C20==O 157?5:>N MDE.a
Configuration Manager 22060TBLAO T48=8< 70A>1>< :5@C20==O 157?5:>N. Defender 4;O :V=F528E B>G>: =5 :5@C20B8<5 ?0@0<5B@0<8 157?5:8 =0 ?@8AB@>OE, O:8<8 265 :5@CT Configuration Manager. 
/:I> E>G5B5 7<V=8B8 F5, 28<:=VBL ?0@0<5B@ "5@C20B8 ?0@0<5B@0<8 157?5:8 70 4>?><>3>N Configuration Manager". >40B:>2V 2V4><>ABV 482VBLAO 2 =02545=V9 =86G5 4>:C<5=B0FVW.M@8AB@V9 ?V4B@8<CT 70E8AB 2V4 V<VB0FVW, 0;5 =5 ?5@51C20T 2 AB01V;L=><C AB0=V.~C4L ;0A:0, 725@=VBLAO 4> @5:><5=40FV9 C =0ABC?=V9 AB0BBV. 
/:I> ?@>1;5<0 =5 7=8:=5, 725@=VBLAO 4> A;C618 ?V4B@8<:8 Microsoft.6Microsoft Defender 4;O :V=F528E B>G>:�  CVE-2022-232788Microsoft Defender 4;O :V=F528E B>G>:�  0=0;VB8:0 703@>7!B0=40@B=V H;OE8 2V4ACB=V: %1.�5@5:>=09B5AO, I> 73040=V 2V4ACB=V H;OE8 VA=CNBL V =5 1C;8 ?5@59<5=>20=V. >6;82>, ?>B@V1=> AB2>@8B8 2V4ACB=V ?0?:8 2 :>=B5:ABV ;>:0;L=>3> :><? NB5@0.PAQ5 240;>AO ?@8T4=0B8 F59 ?@8AB@V9 G5@57 Microsoft Endpoint Configuration Manager.�&O ?@>1;5<0 <>65 28=8:=CB8, O:I> @>74V; @5TAB@C %1 2V4ACB=V9 C: %2. 
)>1 AB2>@8B8 2V4ACB=V9 @>74V; @5TAB@C, <>6=0 A:>@8AB0B8AO: %3B@8AB@V9 ?>2V4><;OT ?@> ?@>AB@>G5=C >@30=V70FVN 45=B8DV:0B>@: %1.k
0< A;V4 2V4'T4=0B8 ?@8AB@V9 2V4 FVTW >@30=V70FVW, 0 ?>BV< ?@8T4=0B8 9>3> 4> ?>B>G=>W >@30=V70FVW.
25@=VBLAO 4> A;C618 ?V4B@8<:8 Microsoft, O:I> C 20A =5<0T 4>ABC?C 4> AF5=0@VN 2V4'T4=0==O 7V 73040=8< V45=B8DV:0B>@>< OrgID.
@8<VB:0: )>1 ?5@53;O=CB8 ?>B>G=89 OrgID, 1C4L ;0A:0, ?5@594VBL =0 ?>@B0; MDEMDE V =0B8A=VBL =0 V<'O :>@8ABC20G0 C 25@E=L><C ?@02><C :CBV.
&5=B@ 157?5:8�25@=VBL C203C, I> ?@8AB@V9 <0T ?><8;:C "020=B065==O ?@820B=>3> :;NG0 4;O A5@B8DV:0B0 02B5=B8DV:0FVW :;VT=B0" 2 6C@=0;V OpsMgr.w840;VBL V ?>2B>@=> V=AB0;N9B5 MMA (035=B <>=VB>@8=3C Microsoft) =0 FL><C ?@8AB@>W B0 ?5@52V@B5, G8 ?@>1;5<0 =5 7=8:=5.<VAF5289 G0A =0 ?@8AB@>W =5 71V30TBLAO 7 G0A>< C AzureAzure.l
5@5:>=09B5AO, I> G0A C ;>:0;L=V9 A8AB5<V ?@028;L=89 V 2AB0=>2;5=> ?@028;L=89 G0A>289 ?>OA.
/:I> F59 ?@8AB@V9 ?@8T4=0=> 4> 4><5=C, ?5@5:>=09B5AO, I> A;C610 Windows Time ?@0FNT, 0 ?@8AB@V9 A8=E@>=V7>20=> 7 G0A>< 20H>3> 4><5=C. 
>:;04=V 2V4><>ABV ?@> =0;0HBC20==O B0 :5@C20==O A8=E@>=V70FVTN G0AC 482. 2 AB0BBV, I>1 ?5@5:>=0B8AO, I> ;>:0;L=89 G0A C BIOS ?@028;L=89.WindowsTimeU@8AB@V9 ?@0FNT ?V4 :5@C20==O< AB0@VH>W 25@AVW System Center Endpoint Protection: %1.�=>2VBL A8AB5<C 4> >AB0==L>W 4>ABC?=>W 25@AVW, I>1 70157?5G8B8 AC<VA=VABL V 4>72>;8B8 @5TAB@C20B8 28O2;5==O H:V4;82>3>  =0 ?>@B0;V 157?5:8 Defender 4;O :V=F528E B>G>:.9!B0;0AO ?><8;:0 2 ?>B>FV :5@C20==O :>=DV3C@0FVTN 157?5:8.�@8AB@V9 ?@8T4=0=> 4> Microsoft Defender 4;O :V=F528E B>G>:. 4=0: AB0;0AO ?><8;:0 2 ?>B>FV :5@C20==O :>=DV3C@0FVTN 157?5:8. &5 <>65 1CB8 G5@57 B5, I> ?@8AB@V9 =5 2V4?>2V40T 28<>30< 4;O :0=0;C :5@C20==O Microsoft Defender 4;O :V=F528E B>G>:.9>?5@54=V C<>28 4;O Microsoft Defender 4;O :V=F528E B>G>:9!B0;0AO ?><8;:0 2 ?>B>FV :5@C20==O :>=DV3C@0FVTN 157?5:8.PA�@8AB@V9 ?@8T4=0=> 4> Microsoft Defender 4;O :V=F528E B>G>:. 4=0: Microsoft Endpoint Manager =5 =0;0HB>20=> G5@57 &5=B@ 04<V=VAB@C20==O 4;O 4>72>;C :>=DV3C@0FVW 157?5:8 Microsoft Defender 4;O :V=F528E B>G>:.0>=DV3C@0FVO >A5@54:C Microsoft Endpoint Manager !B0;0AO ?@>1;5<0 7 ?V4:;NG5==O<.�@8AB@V9 ?@8T4=0=> 4> Microsoft Defender 4;O :V=F528E B>G>:. 4=0: C ?>B>FV :5@C20==O :>=DV3C@0FVTN 157?5:8 AB0;0AO ?><8;:0, O:0 <>3;0 28=8:=CB8 G5@57 ?@>1;5<C 7 ?V4:;NG5==O<. 
5@5:>=09B5AO, I> ?@8AB@V9 <>65 >1<V=N20B8AO 40=8<8 7 :V=F528<8 B>G:0<8 MDE.BV=F52V B>G:8 Azure Active Directory B0 Microsoft Endpoint Manager'030;L=0 ?><8;:0 3V1@84=>3> ?@8T4=0==O.�@8AB@V9 ?@8T4=0=> 4> Microsoft Defender 4;O :V=F528E B>G>:. 4=0: AB0;0AO ?><8;:0 2 ?>B>FV :5@C20==O :>=DV3C@0FVTN 157?5:8, V ! =5 240;>AO 28:>=0B8 3V1@84=5 ?@8T4=0==O.
5@53;O=LB5 ?>A8;0==O 4;O CAC=5==O =5?>;04>: 3V1@84=>3> ?@8T4=0==O =0 @V2=V !.V8?@02;5==O =5?>;04>: V7 3V1@84=8<8 ?@8AB@>O<8, ?V4:;NG5=8<8 4> Azure Active Directory52V4?>2V4=VABL >A5@54:C.�
@8AB@V9 ?@8T4=0=> 4> Microsoft Defender 4;O :V=F528E B>G>:. 4=0: C ?>B>FV :5@C20==O :>=DV3C@0FVTN 157?5:8 AB0;0AO ?><8;:0, 1> V45=B8DV:0B>@ >A5@54:C Microsoft Defender 4;O :V=F528E B>G>: =5 71V30TBLAO 7 V45=B8DV:0B>@>< >A5@54:C Azure Active Directory. 
5@5:>=09B5AO, I> V45=B8DV:0B>@ >A5@54:C Azure Active Directory 7 20H>3> >A5@54:C Defender 4;O :V=F528E B>G>: 71V30TBLAO 7 V45=B8DV:0B>@>< >A5@54:C 2 70?8AV SCP 20H>3> 4><5=C.)V1@84=0 ?><8;:0�  B>G:0 7 T4=0==O A;C618�
@8AB@V9 ?@8T4=0=> 4> Microsoft Defender 4;O :V=F528E B>G>:. 4=0: 70?8A B>G:8 ?V4:;NG5==O A;C618 (SCP) =0;0HB>20=> =5?@028;L=>, V ?@8AB@V9 =5 240;>AO ?@8T4=0B8 4> Azure AD. &5 <>65 1CB8 G5@57 B5, I> SCP =0;0HB>20=> =0 ?@8T4=0==O 4> Enterprise DRS. 
5@5:>=09B5AO, I> 70?8A SCP 2:07CT =0 Azure AD, 0 SCP =0;0HB>20=> 2V4?>2V4=> 4> =09:@0I8E ?@0:B8:. )>1 4V7=0B8AO 1V;LH5, ?5@594VBL 70 ?>A8;0==O<8.#0;0HBC20==O B>G:C 7 T4=0==O A;C618><8;:0 A5@B8DV:0B0.
@8AB@V9 ?@8T4=0=> 4> Microsoft Defender 4;O :V=F528E B>G>:. 4=0: C ?>B>FV :5@C20==O :>=DV3C@0FVTN 157?5:8 AB0;0AO ?><8;:0 G5@57 ?><8;:C A5@B8DV:0B0 ?@8AB@>N. 
!5@B8DV:0B ?@8AB@>N =0;568BL V=H><C >A5@54:C. 5@5:>=09B5AO, I> ?V4 G0A AB2>@5==O ?@>DV;V2 28:>=CNBLAO @5:><5=40FVW.04V9=V ?@>DV;V A5@B8DV:0BV2%5?@028;L=0 :>=DV3C@0FVO AAD Connect.	
@8AB@V9 ?@8T4=0=> 4> Microsoft Defender 4;O :V=F528E B>G>:. 4=0: C ?>B>FV :5@C20==O :>=DV3C@0FVTN 157?5:8 AB0;0AO ?><8;:0 G5@57 =5?@028;L=C :>=DV3C@0FVN 2 AAD Connect. 
)>1 287=0G8B8, I> 702060T ?@8AB@>N 70@5TAB@C20B8AO 2 AAD, 70?CABVBL 70A>18 CAC=5==O =5?>;04>:.1=AB@C<5=B CAC=5==O =5?>;04>: @5TAB@0FVW ?@8AB@>NE;O Windows Server 2012 R2 A?5FV0;L=V V=AB@C:FVW 7 CAC=5==O =5?>;04>:><8;:0 A;C618 DNS.�
@8AB@V9 ?@8T4=0=> 4> Microsoft Defender 4;O :V=F528E B>G>:. 4=0: C ?>B>FV :5@C20==O :>=DV3C@0FVTN 157?5:8 AB0;0AO ?><8;:0 G5@57 ?><8;:C DNS. 5@52V@B5 ?V4:;NG5==O 4> =B5@=5BC B0/01> ?0@0<5B@8 DNS =0 ?@8AB@>W. 5?@028;L=V ?0@0<5B@8 DNS <>6CBL 1CB8 =0 AB>@>=V @>1>G>W AB0=FVW. 
;O =0;56=>W @>1>B8 A;C618 Active Directory ?>B@V1=> 28:>@8AB>2C20B8 DNS 4><5=C, 0 =5 04@5AC <0@H@CB870B>@0. )>1 4V7=0B8AO 1V;LH5, ?5@594VBL 70 ?>A8;0==O<8.!@>1;5<0 A8=E@>=V70FVW 3>48==8:0.�@8AB@V9 ?@8T4=0=> 4> Microsoft Defender 4;O :V=F528E B>G>:. 4=0: AB0;0AO ?><8;:0 2 ?>B>FV :5@C20==O :>=DV3C@0FVTN 157?5:8. 5@52V@B5, G8 3>48==8: 2AB0=>2;5=> ?@028;L=> 9 A8=E@>=V7>20=> =0 ?@8AB@>W, 45 AB0;0AO ?><8;:0.><8;:0 7020=B065==O ?>;VB8:.�@8AB@V9 ?@8T4=0=> 4> Microsoft Defender 4;O :V=F528E B>G>:. 4=0: ?@8AB@V9 =5 7<V3 7020=B068B8 ?>;VB8:8 157?5:8 :V=F528E B>G>: V7 MEM. 
5@5:>=09B5AO, I> ?@8AB@V9 <>65 >1<V=N20B8AO 40=8<8 7 :V=F528<8 B>G:0<8 MDE.><8;:0 A:0AC20==O @5TAB@0FVW.�@8AB@V9 =0@07V 70@5TAB@>20=>, 0;5 9>3> ?>B@V1=> A:0AC20B8. 4=0: ?@>F5A A:0AC20==O @5TAB@0FVW =5 240;>AO 28:>=0B8 G5@57 B8<G0A>2C ?><8;:C. 
5@5:>=09B5AO, I> ?@8AB@V9 <>65 >1<V=N20B8AO 40=8<8 7 MDE :V=F528<8 B>G:0<8.><8;:0 ?@87=0G5==O ?>;VB8:.�@8AB@V9 CA?VH=> ?@8T4=0=> 4> Microsoft Defender 4;O :V=F528E B>G>:. ><C 240;>AO 7020=B068B8 ?>;VB8:8 157?5:8 :V=F528E B>G>: V7 MEM. 4=0: ?V4 G0A ?@87=0G5==O ?>;VB8: AB0;0AO ?><8;:0.><8;:0 72VBC ?@> ?>;VB8:8.�@8AB@V9 CA?VH=> ?@8T4=0=> 4> Microsoft Defender 4;O :V=F528E B>G>:. ><C 240;>AO 7020=B068B8 ?>;VB8:8 157?5:8 :V=F528E B>G>: V7 MEM. 4=0: ?V4 G0A 72VBC20==O ?@> ?>;VB8:8 4> MEM AB0;0AO ?><8;:0.PA_&59 ?@8AB@V9 =5 <>6=0 ?@8T4=0B8 2 ?>B>G=><C AB0=V, >A:V;L:8 9>3> AB0= ImageState C %1 =5?>2=89.�&O ?@>1;5<0 <>65 28=8:=CB8, O:I> >1@07 ! 28:>=02 :V;L:0 ?>A;V4>2=8E A?@>1 sysprep, 0 4;O @5TAB@C 2AB0=>2;5=> 7=0G5==O '%1'.
/:I> ?@>1;5<0 =5 7=8:=5, 725@=VBLAO 4> A;C618 ?V4B@8<:8 Microsoft..V4><>ABV ?@> AB0= ?@>3@0<8 V=AB0;OFVW Windows@>6;82>, 7=0G5==O ImagePath C @5TAB@V 7<V=5=> ?5@54 ?@8T4=0==O<.s5@53;O=LB5 FN ?><8;:C B0 ?5@52V@B5 ImagePath (C <560E %1), I>1 ?5@5:>=0B8AO, I> 2V= 2:07CT =0 ?@8?CAB8<89 H;OE %2.(8O2;5=> >1<565=V ?>4VW :V15@40=8E SenseMDE V ConfigMgr!
5@C20==O ?@8AB@>T< 74V9A=NTBLAO 70 4>?><>3>N Configuration Manager V Microsoft Defender 4;O :V=F528E B>G>:. 5@C20==O ?>;VB8:0<8 G5@57 >18420 :0=0;8 <>65 A?@8G8=8B8 :>=D;V:B8 9 =51060=V =0A;V4:8. 
)>1 C=8:=CB8 FL>3>, ?>;VB8:8 157?5:8 :V=F528E B>G>: A;V4 V7>;N20B8 2 >4=V9 A8AB5<V 157?5:8.8!?V2VA=C20==O 7 Microsoft Endpoint Configuration Manager!B0= @5TAB@0FVW 7<V=5=>

5@C20==O ?@8AB@>T< 74V9A=NTBLAO 70 4>?><>3>N Configuration Manager V Microsoft Defender 4;O :V=F528E B>G>:. @8AB@V9 1C;> 28;CG5=> 7 @VH5==O :5@C20==O :>=DV3C@0FVTN 157?5:8, 1> 7<V=8;0AO >1;0ABL 70AB>AC20==O 01> 7 ?@8AB@>N 2840;8;8 ?>7=0G:C MDE-Management.�!8AB5<=V 7<V==V >B>G5==O %%TEMP%% (B0 %%TMP%%) =5 287=0G5=>. &5 <>65 A?@8G8=8B8 71>W 2 @>1>BV Windows Defender V V=H8E A8AB5<=8E :><?>=5=BV2, O:V 70;560BL 2V4 B8<G0A>2>3> :0B0;>3C.�87=0GB5 7<V==V A8AB5<=>3> A5@54>28I0 TEMP V TMP. !B0=40@B=5 7=0G5==O�  %%SystemRoot%%\TEMP 4;O A8AB5<=8E >1;V:>28E 70?8AV2. 5@5:>=09B5AO, I> H;OE VA=CT B0 <0T 2V4?>2V4=V 4>72>;8.�0B0;>3 %%TEMP%% =54>ABC?=89. &5 <>65 ?@8725AB8 4> 71>W2 C :><?>=5=B0E 0E8A=8:0 Windows, O:8< ?>B@V1=> 70?8AC20B8 B8<G0A>2V D09;8.j5@5:>=09B5AO, I> :0B0;>3 %%TEMP%% VA=CT, 0 ?>B>G=89 >1;V:>289 70?8A <0T 4>72>;8 =0 G8B0==O 9 70?8AC20==O.�0B0;>3 %%TEMP%% =0;0HB>20=> =0 =5AB0=40@B=89 H;OE. 5AB0=40@B=89 H;OE TEMP <>65 A?@8G8=8B8 ?@>1;5<8 7 :><?>=5=B0<8, O:V ?@8?CA:0NBL AB0=40@B=5 @>7B0HC20==O.PA�5@52V@B5, G8 A?5FV0;L=89 H;OE %%TEMP%% T =02<8A=8<. /:I> F5 =5>GV:C20=>, A:8=LB5 7<V==V A8AB5<=>3> A5@54>28I0 TEMP V TMP 4> AB0=40@B=>3> 7=0G5==O (%%SystemRoot%%\TEMP 4;O A8AB5<=8E >1;V:>28E 70?8AV2).Y25@=VBL C203C, I> ?@8AB@V9 <0T :V;L:0 @>1>G8E >1;0AB59 MMA (Microsoft Monitoring Agent).8
/:I> ?@8AB@V9 ?V4:;NG5=> 4> Defender 4;O :V=F528E B>G>: G5@57 V=B53@0FVN ASC (B0:>6 2V4><>3> Azure Defender 4;O A5@25@V2), @5:><5=4CTBLAO 28;CG8B8 @>1>GC >1;0ABL MDE, I>1 C=8:=CB8 ?@>1;5< V7 ?5@54020==O< 40=8E G5@57 :V15@0B0:8. 
>:;04=V 2V4><>ABV ?@> V=B53@0FVN ASC V7 Defender 4;O :V=F528E B>G>: 482. 2 AB0BBV.MDE 2 Azure~&59 :><? NB5@ =5 240;>AO ?V4:;NG8B8 G5@57 2V4ACB=VABL 4>72>;V2 4;O :;NG0 @5TAB@C HKLM_System_CurrentControlSet_Services_Sense.�&5 <>65 1CB8 A?@8G8=5=> 2B@CG0==O< AB>@>==VE ?@>4C:BV2 157?5:8 01> 2V4ACB=VABN 2 >1;V:>2>3> 70?8AC SYSTEM 4>72>;V2 =0 ?>2=89 4>ABC? 4> HKLM_System_CurrentControlSet_Services_Sense. ;O >1;V:>2>3> 70?8AC SYSTEM 7=0945=> B0:V 4>72>;8: %1O25@=VBL C203C, I> =0 FL><C A5@25@V =5 2AB0=>2;5=> ACG0A=89 C=VDV:>20=89 035=B.�0 FL><C ?@8AB@>W =5 V=AB0;L>20=> C=VDV:>20=89 035=B 4;O A5@25@V2 =86G>3> @V2=O.  5:><5=4CTBLAO V=AB0;N20B8 =>289 035=B 4;O >?B8<0;L=8E ?@>4C:B82=>ABV 9 <>6;82>AB59 70E8ABC. ;O >B@8<0==O 4>40B:>2>W V=D>@<0FVW 725@=VBLAO 4> 4>:C<5=B0FVWJV4:;NGVBL A5@25@8 Windows 4> A;C618 Microsoft Defender 4;O :V=F528E B>G>:D><8;:0 ?@87=0G5==O ?>;VB8: AB0;0AO G5@57 B0:V 7<V==V A5@54>28I0: %1
@8AB@V9 V=B53@>20=> 7 Microsoft Defender 4;O :V=F528E B>G>:, V 9><C 240;>AO 7020=B068B8 ?>;VB8:8 157?5:8 :V=F528E B>G>: V7 MEM. 4=0: ?V4 G0A ?@87=0G5==O ?>;VB8: AB0;0AO ?><8;:0. 
 8;CGVBL V7 707=0G5=8E 28I5 A8AB5<=8E 7<V==8E A5@54>28I0 2AV H;OE8, O:8E =5 VA=CT.9#AB0=>2VBL 7<V==V A5@54>28I0 2 A8AB5<=V9 0=5;V :5@C20==Ov5 240;>AO ?@87=0G8B8 ?>;VB8:8, >A:V;L:8 =0 ?@8AB@>W 22V<:=CB> 48=0<VG=5 ?;0=C20==O 70 ?@8=F8?>< @V2=>W G0AB:8 (DFSS).)
@8AB@V9 V=B53@>20=> 7 Microsoft Defender 4;O :V=F528E B>G>:, V 9><C 240;>AO 7020=B068B8 ?>;VB8:8 157?5:8 :V=F528E B>G>: V7 MEM. 
 4=0: ?V4 G0A ?@87=0G5==O ?>;VB8: AB0;0AO ?><8;:0 G5@57 >1<565==O API, O:5 <>65 28=8:0B8, O:I> 22V<:=CB> DFSS. 
 25@=VBLAO ?> 4>?><>3C 4> A;C618 ?V4B@8<:8 Microsoft.U@8AB@V9 =5 >=>2;5=>, V =0 =L><C =5 @>73>@=CB> 70E8AB 2V4 V<VB0FVW F8D@>2>W ACB=>ABV.�1>2 O7:>2> @>73>@=VBL @5:><5=4>20=89 ?0:5B >=>2;5=L 4;O A8AB5<8 157?5:8, I>1 70E8AB8B8 ?@8AB@V9 2V4 V<VB0FVW F8D@>2>W ACB=>ABV. >:;04=VH0 V=D>@<0FVO 4>ABC?=0 70 ?>A8;0==O<8.PA6Microsoft Defender 4;O :V=F528E B>G>:�  CVE-2022-232788Microsoft Defender 4;O :V=F528E B>G>:�  0=0;VB8:0 703@>7r@8AB@V9 ?@0FNT =0 AB0@V9 25@AVW 40BG8:0 @>B84VW 703@>70< C :V=F528E B>G:0E Microsoft Defender 4;O :V=F528E B>G>:B=>2VBL 40BG8:, I>1 70157?5G8B8 >?B8<0;L=89 70E8AB V AB01V;L=VABL._=>2;5==O Microsoft Defender 4;O :V=F528E B>G>: 4;O 40BG8:0 @>B84VW 703@>70< C :V=F528E B>G:0E�5 240;>AO ?@8T4=0B8 F59 :><?'NB5@, >A:V;L:8 MsSense.exe 020@V9=> 7025@H82 @>1>BC =0 5B0?V V=VFV0;V70FVW TelLib.dll.
 ><8;:0 020@V9=>3> 7025@H5==O @>1>B8: %1�&5 <>65 AB0B8AO, :>;8 >1;V:>289 70?8A SYSTEM =5 <0T 4>72>;V2 =0 70?8A 4> >GV:C20=>3> H;OEC (ProgramData\Microsoft\Windows Defender Advanced Threat Protection\Cyber).
 5@52V@B5 A?8A:8 ACL 70 H;OE>< V 70 ?>B@518 A:8=LB5 4>72>;8 7 10BL:V2AL:>W ?0?:8.L@8AB@V9 ?V4B@8<CT 70E8AB 2V4 ?V4<V=8, 0;5 9>3> I5 =5 70@5TAB@>20=> 2 E<0@V.�5@5:>=09B5AO, I> ?V4:;NG5==O 4> URL-04@5A CNC EDRCloud =5 701;>:>20=>. /:I> ?@>1;5<0 =5 7=8:=5, 725@=VBLAO 4> A;C618 ?V4B@8<:8 Microsoft.;>=DV3C@0FVO 01> 70;56=VABL 702060T 70?CA:C 70E8ABC <5@56V._5@53;O=LB5 F5 ?>2V4><;5==O ?@> ?><8;:C, I>1 7@>7C<VB8 ?@>1;5<C 7 1;>:C20==O< V 28@VH8B8 WW: %1pV4B@8<C20=V H8D@8 ?@>B>:>;C TLS =5 22V<:=5=> =0 FL><C :><? NB5@V. &5 <>65 2?;8=CB8 =0 ?V4:;NG5==O 4> E<0@8 MDE.�5@52V@B5 =0;0HB>20=V H8D@8 (C HKLM\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002), I>1 ?5@5:>=0B8AO, I> 2>=8 <VABOBL <V=V<0;L=> =5>1EV4=V H8D@8 4;O ?V4:;NG5==O 4> E<0@8 MDE.'><?;5:B8 H8D@V2 V 28<>38 ?@>B>:>;C TLSl0 FL><C :><?'NB5@V =5 22V<:=CB> :;VT=BAL:89 ?@>B>:>; TLS 1.2. &5 <>65 2?;8=CB8 =0 ?V4:;NG5==O 4> MDE E<0@8.�5@5:>=09B5AO, I> :;VT=B ?@>B>:>;C TLS 1.2 22V<:=5=> (C HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client).PAZ(8D@8 ECDH =5 22V<:=5=> =0 FL><C :><? NB5@V. &5 <>65 2?;8=CB8 =0 ?V4:;NG5==O 4> E<0@8 MDE.�5@5:>=09B5AO, I> KeyExchangeAlgorithm ECDH C2V<:=5=> (C HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\ECDH).05 240;>AO 28:>=0B8 ?5@52V@:C 107>2>W URL-04@5A8�><?>=5=B NetworkProtection 28<:=CB>, 01> =5 ?@>9H>2 ?5@52V@:C URL-04@5A8. &5 <>65 A2V4G8B8 ?@> =0O2=VABL <5@5652>3> ?5@5A?@O<>2C20G0 (=0?@8:;04, Cisco Umbrella).�

B��Y
��U
Q
�
	
c
/
�H
 l
?
 �=Q
� �
�+
<
Q� 
�
 � F
QBHM
�: ST��O�Ae
�W
 ��a
 �Te
T�g
�� (%1). X
��WY

�e
�U
_
 a
m
�R 
[
 
�_
�� p
<L�5!>
4 �Y
O
E� c
3��
�
�� e
%
Y
�m

R �[� !���
! '
Q
]
�, [
1 ".!g
H>�: 3�B��e
��9 ]

M_
 
�9H
5
e
-
�
;]
 0a
 �W
�!
���c
V�
 �
3�m !M
��:
'
�[
g
 �
9� 	
����� ��g
�O<�H
� g
'
� S.!�:
 

[
c
VD
�
c
)
��. j
H
�K
_
g


@
<
 �'
� S�
VU
M	
c
�3, �� S7	
�D
�
+

k
U

 �� _
� �c
  � <
��!
MO �D
c
.!Y
�5�c
_
/�Y
�6V
[
 �O
�
�
-

 >� B[�U �
�+
AQ, e
=
K
 3�-3�9 �=
 e
7[
�.D�
�3�a
[
 �
�!_

 ��_
�c
���]
/�Q#
�e
��
U -
; +
�W
�[
��
g
 
��
���7Y
 �
�W
 �
��+
�BPA5@>20=89 4>ABC? 4> ?0?>:M5 240;>AO 7020=B068B8 <>4C;L mde_cfa_evaluation�  4V03=>AB8:0 CFA =54>ABC?=005@52V@B5 V=AB0;OFVN MdeDiag V @5TAB@0FVN <>4C;OA# 6C@=0;0E =5 7=0945=> 28O2;5=L CFA (:5@>20=>3> 4>ABC?C 4> ?0?>:)05 ?>B@V1=> =VG>3> @>18B8�  CFA ?@0FNT =>@<0;L=>?@>0=0;V7>20=> ?V4>7@V;V D09;8 (%1) 4;O 287=0G5==O AB0=C 4>2V@8q5@53;O=LB5 CfaTrustChecks.txt C 28EV4=V9 V=D>@<0FVW 4V03=>AB8:8, I>1 >B@8<0B8 4>:;04=V @57C;LB0B8 0=0;V7C 4>2V@8C%1 =5 4>2V@OT CFA, >A:V;L:8 7>1@065==O ?@>F5AC =5 287=0=> =04V9=8<.q>409B5 9>3> 4> A?8A:C 4>72>;5=8E ?@>3@0< 01> 4>409B5 28:;NG5==O 0=B82V@CA0 4;O FL>3> D09;C, O:I> 4>2V@OTB5 9><C.J%1 =5 4>2V@OT CFA, >A:V;L:8 9>3> 10BL:V2AL:89 5;5<5=B =5 287=0=> =04V9=8<.E%1 =5 4>2V@OT CFA, >A:V;L:8 9>3> 10BL:V2AL:89 5;5<5=B =5 T AF5=0@VT<.<%1 =5 4>2V@OT CFA, >A:V;L:8 7020=B065=> =5=04V9=89 D09;: %2.DCFA =5 4>2V@OT %1, >A:V;L:8 WW 1C;> 22545=> =5=04V9=8< ?@>F5A><: %2.C>409B5 28:;NG5==O 0=B82V@CA0 4;O FL>3> D09;C, O:I> 4>2V@OTB5 9><C.Z>409B5 28:;NG5==O 0=B82V@CA0 4;O FL>3> ?@>F5AC, O:I> 4>2V@OTB5 9><C (28:;NG5==O ?@>F5AC).PA
@>F5A: %1
>4VW CFA:    VO: %1, ?@8G8=0: %2>4VW 701@C4=5==O:"  - TaintType: %1, TaintReason: %2>2V4=8:: %1(5:75<?;O@V2: %1)PAt'%2' ASR %1 GUID (465@5;>: %3) <VAB8BL ?@>1V;8 =0 ?>G0B:C 01> 2 :V=FV, O:V <>6CBL ?5@5H:>460B8 70AB>AC20==N ?@028;0.f840;VBL ?>G0B:>2V B0 :V=F52V ?@>1V;8 7 GUID ?@028;0 ASR C :>=DV3C@0FVW 3@C?>2>W ?>;VB8:8 01> @5TAB@C.�ASR %1 GUID %2 (465@5;>: %3) <VAB8BL DV3C@=V 4C6:8. 45=B8DV:0B>@8 GUID A;V4 2:07C20B8 157 4C6>: (=0?@8:;04, 56a863a9-875e-4185-98a7-b882c64b5ce5).W8;CGVBL DV3C@=V 4C6:8 7 GUID ?@028;0 ASR C 3@C?>2V9 ?>;VB8FV 01> :>=DV3C@0FVW @5TAB@C.�8:;NG5==O ASR '%1' (465@5;>: %2) <VAB8BL ?>G0B:>2V 01> :V=F52V ?@>1V;8 G8 B01C;OFVW, O:V <>6CBL ?5@5H:>460B8 ?>HC:C 28:;NG5==O.k840;VBL ?>G0B:>2V B0 :V=F52V ?@>1V;8 7V H;OEC 28:;NG5==O ASR C 3@C?>2V9 ?>;VB8FV 01> :>=DV3C@0FVW @5TAB@C.�ASR %1 GUID %2 (465@5;>: %3) =5 T 4V9A=8< GUID. GV:C20=89 D>@<0B: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx (=0?@8:;04, 56a863a9-875e-4185-98a7-b882c64b5ce5)�8?@02B5 GUID ?@028;0 ASR C :>=DV3C@0FVW 3@C?>2>W ?>;VB8:8 01> @5TAB@C, I>1 28:>@8AB>2C20B8 ?@8?CAB8<89 D>@<0B GUID 157 4>40B:>28E A8<2>;V2.1
8:;NG5==O 2B><0B8G=>3> @>7?V7=020==O <>2;5==O "%1" (465@5;>: %2) <VAB8BL A53<5=B 10BL:V2AL:>3> :0B0;>3C (".."). VA;O @>72 O70==O ?@>1;5<8 ".." D0:B8G=89 28:;NG5=89 H;OE <>65 1CB8 =01030B> H8@H8<, =V6 F5 ?5@5410G0T 1C:20;L=89 70?8A. &5 <>65 =5?><VB=> @>7H8@N20B8 28:;NG5==O 70 <56V 70?;0=>20=>3> >1AO3C.�0<V=VBL 70?8A 28:;NG5==O 2B><0B8G=>3> @>7?V7=020==O <>2;5==O =0 ?>2=VABN @>72 O70=89 01A>;NB=89 H;OE, O:89 =5 <VAB8BL A53<5=BV2 "..". AB0==V 25@AVW Microsoft Defender 2V4E8;ONBL =5:0=>=VG=V 70?8A8 28:;NG5=L ?V4 G0A 7020=B065==O :>=DV3C@0FVW.PA')> B0:5 0=0;VB8:0 4V03=>AB8:8 Defender?
=0;VB8:0 4V03=>AB8:8 Defender�  F5 V=AB@C<5=B A0<>4V03=>AB8:8, O:89 718@0T 9 0=0;V7CT 4V03=>AB8G=V 40=V, 0 B0:>6 =040T 72VB 4;O 4>?><>38 2 CAC=5==V ?@>1;5< V7 ?@>4C:B82=VABN 2V@BC0;L=8E <0H8= Windows 2 Azure. >:C<5=B0FVO 0=0;VB8:8 4V03=>AB8:8 Defender 4;O Windows: %1.$ G>3> ?>G0B8 ?5@52V@:C FL>3> 72VBC?
>G=VBL V7 2:;04:8 "3;O4". 5@53;O=LB5 @5:><5=40FVW B0 ?>A8;0==O =0 @57C;LB0B8. V7=09B5AO, O: 2>=8 <>6CBL 2?;8=CB8 =0 ?@>4C:B82=VABL, 0 B0:>6 ?@> @5:><5=40FVW I>4> :>=DV3C@0FV9, >?B8<V7>20=8E 4;O ?V428I5==O ?@>4C:B82=>ABV. >:;04=VH5 ?@> ?5@53;O4 72VBC %1.//:V 40=V 718@0T 0=0;VB8:0 4V03=>AB8:8 Defender?&
=0;VB8:0 4V03=>AB8:8 Defender 718@0T 2V4><>ABV ?@> 2V@BC0;L=C <0H8=C Windows, :>=DV3C@0FVN 48A:V2 01> ?C;V2 AE>28I, ;VG8;L=8:8 ?@>4C:B82=>ABV, A?>6820GV2 28A>:8E @5AC@AV2, 6C@=0;8 B0 @V7=V B@0AC20==O. >:;04=V 2V4><>ABV ?@> B8? 2V4><>AB59, O:V 718@0T 0=0;VB8:0 4V03=>AB8:8 Defender, 482. 2 %1.
P�P�P�P�ld
!B0;0AO ?><8;:0 ?V4 G0A 28:>=0==O <>4C;O LUA.

x
!B0;0AO ?><8;:0 ?V4 G0A 7020=B065==O <>4C;O LUA-D09;C.

L
!8=B0:A8G=0 ?><8;:0 2 <>4C;V LUA.

D
!B0;0AO ?><8;:0 ?0<�OBV LUA.

D
!B0;0AO 7030;L=0 ?><8;:0 LUA.

D
8=8:;0 ?><8;:0 B@82>38 LUA.

\
8:>=0==O LUA ?5@5@20=> A83=0;>< 7C?8=:8.

�
5 240;>AO 48=0<VG=> =0;0HBC20B8 7=V<:8 48=0<VG=>W ?0<�OBV 4;O ?@>F5AC.

4VS_VERSION_INFO��
�e�e?v
StringFileInfoR
042204B0L
CompanyNameMicrosoft Corporation�7
FileDescription/4@> 4V03=>AB8:8 Microsoft Defender 4;O :V=F528E B>G>:B
InternalNamedefenderdiag.dll~-
LegalCopyright� >@?>@0FVO 09:@>A>DB. #AV ?@020 70E8I5=V.R
OriginalFilenamedefenderdiag.dll.muin'
ProductName?5@0FV9=0 A8AB5<0 Microsoft� Windows��8
FileVersion4.18.26080.3 (9e1f3147fbc83f18a98a965394a23e07747d7295)>

ProductVersion4.18.26080.3D
VarFileInfo$Translation"�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD(0�(	*�H��

��'�0�'�

10
	`�H
e
0\
+

�7
�N0L0
+

�7
0	
���010
	`�H
e
 ��֘���Z�ghd-��������e<�Htс��
0�a0�I�
3
$]��q� ��
$0
	*�H��


0S10	UUS10U
Microsoft Corporation1$0"UWindows Production PCA 20230
260430183934Z
270429183934Z0p10	UUS10U
Washington10URedmond10U
Microsoft Corporation10UMicrosoft Windows0�
�0
	*�H��



�
�0�
��
��4�bI��p�%�x�3 m���˝~���83`�;P#tίe��C�#3�&��	�j���1z�Q��,-�KM���_�ɨ$�8�
/���
?��vE���^Wxq�e��nQ�v��ϗ3�I�~d��B�o�K�>w/���LF������"U�	HP��	LR�.�k'�mAѶ�t�ի
!N	_G��aE3�X�2�r��0�{:s���V1!��i�a�F�4�j8.�.�wk!�G'��	�X��n̍���d%�&_'�9���4ˑk[�;��?�9��ē���x����+vE��->�L�T��C�_ �n#��o�]y��Og���V��gHG+?��at��ʮ,1�^r-�������15�t�

��
�0�
�0U

��0U%0
+

�7
+
0U+N����N�"�����!�	0EU>0<�:0810UMicrosoft Corporation10U
500446+5079150U#0����?Z	�=!U�1S"�0ZUS0Q0O�M�K�Ihttp://www.microsoft.com/pkiops/crl/Windows%20Production%20PCA%202023.crl0g+


[0Y0W+
0�Khttp://www.microsoft.com/pkiops/certs/Windows%20Production%20PCA%202023.crt0U

�00
	*�H��


�
�4Z��
���
1��
�	�˫5F��V�5��;DŐ-%�ۚ�i�����
���
�M���r�'4�Ɣ��!I皸a08.�wq��̔`Щ�!əO�����{�����y��eNu���j�҂�����Xf��C
�˼�S�.�
T�QG���R��|d5$����k���O���J��L3���$�|���!&O̅X=��H\�\��{�P�Ξ�e��;�ϳb��'iN���۲c����-f�x��9��b�+�V#)�!˜�y���^\�);��W툊k
Lf3���S71��� �r�P��`FV�sa��� /C)Ҩ:�/Њ$n�Eh�1�w�o�mGP��6�h��~�!R����&���a��r��!
4��� Bs�w�r��_�ew�|�8�bP�O�B�_�L�;����p��5�z����Ι/2�)�t�a��#Z�\�ԝ�l�(�CR�|�3�!^
�B�$������VH�,�F��D?�0��0���
3��V	K��!0
	*�H��


0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
230613183415Z
350613184415Z0S10	UUS10U
Microsoft Corporation1$0"UWindows Production PCA 20230�"0
	*�H��



�0�
�
�.�
]nqK��H���b!�NF��-i�Y�3���'x���v}���/g��W����@�Sp����גrKҳ>��e�)�V�ƃ�o���[��y��2��������i�]U`�˰ʹ������g����xL�m
%5����uG<�>#��ҥ_x
B�f.��ޕFo��)���ݹ�<-�}���έ���=p2蝁y��Q���UAo���C�ĵ����Z�U~�f*>��P�I!#�x(Lii�njk�I��sWL��3uo�Ŀ���X�-*e+�H$�
��y��\�
��n%�8���!���_>�Զ
RH�0ƥ>f��~4�Qb�o�=����5?QI^�}�����P�u��O�lzp0H}q���RQ#��O�3�J/�xw_�	W��;Q5x?�E��pd���"H��i�'ư ��<��N���d"�άk���ˡ��<$��q����s�х[*:�4
G���g�c�%,�CXt��E���p������

��
F0�
B0U

�
�0	+

�7

0U���?Z	�=!U�1S"�0	+

�7
SubCA0U

�0

�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+


N0L0J+
0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
	*�H��


�
�0Bh߄�<�o��Nr��U���|q���5��r5����wy^�Hw��4��A���`�6�(י�V�o�BRm�Mv��s%�����D��� �Д�(��8-n���E"}��K��|���lB�s�y����[���Q���`riAj��/7�X,!�Nvw�Z����*Yۺ�T��
�Jq�ƾ�a�܀�r�?T�AG���ޖ��B��sQ���W[4��Y�eɃ�`�	�z�+���t����8�+[ge��
<	�WI
� 2i�K ��
M�Ky��W�{ԜGH������$��r9���{�.�Y�k�����!��Bt�5�ϼ߳�.���:�ݒa��5ʡ��ήz�-�{]v�Z����\aL�lt��ov�s
��|jll8���U��pkJ��{���Dqۋ`Q��Jzz�Q�D�=��E�_c
E�oM0v��݁�U�ʃ��UF����
��]���k%Xa
�	��Jb�^g|X\��#��okPy/�p1�^0�Z

0j0S10	UUS10U
Microsoft Corporation1$0"UWindows Production PCA 20233
$]��q� ��
$0
	`�H
e
���0	*�H��

	1
+

�7
0
+

�7
10
+

�7
0/	*�H��

	1" �By����w+��zZ$�GM��G.�N��0B
+

�7
1402��Microsoft��http://www.microsoft.com0
	*�H��



�
��7F�P�n���p��h�mN��'9�oB�`��eݥx>H����_I���X�::y�q{�9S�Ì�1���<\�l�y�V�*���a�iz2�+��Bױ"��-Q��N�J���/®����T�mS��1VTS+>�lq^��+�.��z���������0��HOH8'bE�|T¹���N	�����ڢnh0����Q��՜
y��Q/?o����~��.
�r _;�$ђn�i�.�z4Gq��m2�1#�z��.K��&:;e�vX|1��(���ܥ�nA&�%��:
�G/��K�d��������<�Jb!Nf���f[��D����TJGb1��V��$�D\��<'�p8�B���:�CT���3d�Y����0��
+

�7
1��0�|	*�H��

��m0�i
10
	`�H
e
0�
R*�H��

	
��
A�
=0�
9


+

�Y

010
	`�H
e
 ��mxa+�=��>87O??�y�)-��St'�j_�Ǐ�20260815031140.719Z0�
�Ѥ��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1'0%UnShield TSS ESN:9200-05E0-D9471%0#UMicrosoft Time-Stamp Service���0� 0��
3#O�`$S�+
#0
	*�H��


0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
260219193957Z
270517193957Z0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1'0%UnShield TSS ESN:9200-05E0-D9471%0#UMicrosoft Time-Stamp Service0�"0
	*�H��



�0�
�
��
����t��	&���#Pl[�K��&B�4�l[�L�'D
�j���
��J>j�
�2�o�\^��ݟ�2�Z-�a#�Dg���Q☩M��䎻�,�=nY� M�������9�pt�(g��(]�&]Jf��R��.�.8��9��\D#+*{�ݪk�
�/)K���Ҏ�'�>.vL�azUְ��;2��TP��ye �m��"���t�����ڛ� �Z$:M��S����)v��]M��'ADb2p�5u�x��G<�+w'�f����xk2@���D.Q0�И��4;���8�I�
%S��7��,���ǽD��=c��)x>��JE�g�s�_����ɏ*� �z�0�`��@��L�И�/hJ*�(��o?Ub_w��B$�O���ϓ9`~<�٤Lj�����"��*���7��tB����O�����AY?����Rti�}@e,��{q��wx�~O�j��@[y���E��0�0_m��G{XM�]���

��
I0�
E0U���o���c��A�P`,�V�0U#0���]^b]����e�S5�r0_UX0V0T�R�P�Nhttp://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0l+


`0^0\+
0�Phttp://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0U

�00U%

�0
+
0U

��0
	*�H��


�
�C�ϛi��p
�\��,�
��j��m�9��7sS4�\p�=�L�X5��͞g'.<�3�h��Ju�jB5�e�N�H �d����`޲xB�An�u�J���i�j�xr��ᬨs	�0i��&)��*]An�����[]䣴����7����e��Р�a��:2s�<�z�Q�V�>�b���O:�[FϜ`�=6����ؔ��[ͯ���/��$�v���SH�
"�,��\��{��?��ۭ�w�[�4�G��NaiH��A���ר��X<��e'�Uٗ/SϪ�7)WE(�db�3>�R�؅}�d�<Z����=�b>�.���5,�ƃ�JZ�dQ1�2�G�	����&B
�j�	�q%]Hb�OA�B��66��i���J�K��.e!?�l#�W�o��W�X��B��BD�U�?�p��Mtgux��"}Q�#P���."k�ȟUf(�q{�����]��K'�園���Q֜�è~�>0�q0�Y�
3��k��I�0
	*�H��


0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100
210930182225Z
300930183225Z0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100�"0
	*�H��



�0�
�
��L�r!y���$y�Ղ��ҩlNu��5W�
lJ�⽹>`3�\O�f��SqZ�~JZ��6g�F#���w2��`}jR�D���Fk��v��P�D�q\Q17�
8n����&S|9azĪ�ri����6�5&dژ;�{3��[~��R���b%�j�]�S���VM�ݼ��㑏�9,Q��pi
�6-p�1�5(�㴇$��ɏ~�T��U�mh;�F��z)7���E�Fn�2��0\O,�b�͹⍈䖬
J��q�[g`���=� �s}A�Fu��_4���� }~�ٞE߶r/�}_��۪~6�6L�+n�Q���s�M7t�4���G��|?Lۯ^����s=CN�39L��Bh.�QF�ѽjZa
s�g�^�(v�3rק ��
�co�6d�[���!]_0t���عP��a�65�G������k�\RQ]�%��Pzl�r�Rą��<�7�?x�E���^ڏ�riƮ{��>j�.�

��
�0�
�0	+

�7


0#	+

�7*�R�d���<F5)��/�0U��]^b]����e�S5�r0\U U0S0Q+

�7L�}

0A0?+

3http://www.microsoft.com/pkiops/Docs/Repository.htm0U%0
+
0	+

�7
SubCA0U
�0U

�0

�0U#0��Vˏ�\bh�=��[�Κ�0VUO0M0K�I�G�Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+


N0L0J+
0�>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
	*�H��


�
�U}�*��,g
1$[�rK��o�\�>NGdx���=13�9��q6?�dl|�u9m�1��lѡ�"��fg:SMݘ��x�6.���V����i�	�{�jo�)�n�?Hu
��m��m#T�xSu$W�ݟ�=��h�e��V����(U'�$�@���]='�@�8���)�ü�T�B�������j�BRu�6��as.,k{n?,	x鑲�[�I�t�쑀�=�J>f;O���2ٖ�
���t��Lro�u0�4�z�P�
X�@<�Tm�ctH,�NG-�q�d�$�smʎ	��
WITd�s�[D
�Z�k
��(�g($�8K�n�!TkjEG����^O���Lv�WT	�i
D~|�als�
��Af=i��AI~~���;����>�1Q������{��p���(��6ںL���
�4�$5g+�
�挙��"��'B=%��tt[jў>�~�13}���{�8pDѐ�ȫ:�:b�pcSM��m��qj�U3X��pf�M0�5

0����Ѥ��0��10	UUS10U
Washington10URedmond10U
Microsoft Corporation1%0#UMicrosoft America Operations1'0%UnShield TSS ESN:9200-05E0-D9471%0#UMicrosoft Time-Stamp Service�#


0+8Eal�D�fz���#�0�j���0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100
	*�H��


�*Jk0"20260815021611Z20260816021611Z0t0:
+

�Y

1,0*0
�*Jk
0
�0
"0
�+��
06
+

�Y
1(0&0
+

�Y
�
0
� �
0

��0
	*�H��


�

��iQ��T�~x#�Et9�
���af��L�6 �α�Uw��B_0��,=x!�_��M|,���weM�9>H��;���:�rے:f�;��^c�:�q��c�
Z���ڥ�w���6�����'�<:�>;�K��c��-���g�gZ�����$cj$ہ���u�������
�UNz�VKs�p|������¯r0TkZy[��쭢>�ՅeY�C���)��6�O�`Z%B��%7qI2��$!��|p1�
0�	

0��0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103#O�`$S�+
#0
	`�H
e
��
J0	*�H��

	1
*�H��

	
0/	*�H��

	1" �f��?��˃��؉�S�$��zҲ��PpD@��0��*�H��

	/1��0��0��0�� ��3,n��)���ƃ㼘���e/�@��0��0���~0|10	UUS10U
Washington10URedmond10U
Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20103#O�`$S�+
#0" �H��p��!�ݕ��,�0�^̰b:X�dx�10
	*�H��


�nzq�7},M*Ʒ�m�����n�+��;�{�y
�kU�!�[�%��V
����w'
1���74L%7��U|�ғ�!t�==���	q��r"p%ga|�#��P�\�d�_�n���7/j�����e��%1��U���R%�qi^c��|ސ{�垃�F*ݿN����bc��A����e<PV�Cg�r�X�-�����	S��8w#��pT�^F&U����i��Mẋ5�R�XvLu���O;��؅��Z)�� �}��G9嬝F�g����H�E��ӝ�A�.b2���xN�A��:���Ɣݠ����!`غ��ʪ�pi[v�&A�*/�(��/��Ю�D��N୷��K*{x	����U@���J͕3o�O�ƭn�%:�(䷲�Ɵശ���g�X�0�����`�l�l㍡#�q7{�ҡ�����[-E��-ң��]v��%;Ud	���1B��9g<��oD#k�K��Q�3.�ld