Application whitelisting with hash values in Defender AV

Question

Can processes and programmes also be excluded via the declaration of hash values in Defender AV? For example whitelisting of self-programmed company applications.

Answer 1

anonymous user
Hi,

When you add an indicator hash for a file, you can choose to raise an alert and block the file whenever a device in your organization attempts to run it.
You can refer to the following link:
Allow or block file
https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts#allow-or-block-file
Hope above information can help you.

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.