Appendices for Microsoft Defender Antivirus ring deployment using Group Policy and Windows Server Update Services (WSUS)

Article
11/15/2023

Applies to:

Platforms

Windows
Windows Server

Want to experience Microsoft Defender for Endpoint? Sign up for a free trial.

Microsoft Defender for Endpoint is an enterprise endpoint security platform designed to help enterprise networks prevent, detect, investigate, and respond to advanced threats.

Tip

Microsoft Defender for Endpoint is available in two plans, Defender for Endpoint Plan 1 and Plan 2. A new Microsoft Defender Vulnerability Management add-on is now available for Plan 2.

Appendix A - Security Intelligence Updates

Microsoft continually updates security intelligence in antimalware products to cover the latest threats and to constantly tweak detection logic. The updates enhance the ability of Microsoft Defender Antivirus and other Microsoft antimalware solutions to accurately identify threats. This security intelligence works directly with cloud-based protection to deliver fast and powerful AI-enhanced, next-generation protection.

References:

Appendix B - Engine Updates

Engine updates are the updates for the scan engine, which is used by the “Security Intelligence Updates”. First released on July 15, 2010.

Appendix C - Platform Updates

Platform Updates, are the .exe’s, dll’s, and .sys’s for the Microsoft Defender Antivirus service.

Channel:	Version:	Revision:		Remarks
Beta Channel - Prerelease	4.18.2304.4	‘23 April, minor rev 4	n/a	This channel is the one you want to test for app compatibility, reability and performance.
Current Channel (Preview)	4.18.2303.8	‘23 Mar, minor rev 8	n/a	Same as for Beta Channel - Prerelease
Current Channel (Staged)	4.18.2303.7	‘23 Mar, minor rev 7	n/a	Same as for Beta Channel - Prerelease
Current Channel (Broad)	4.18.2302.7 see note	‘23 Feb, minor rev 7	’23 Mar	This channel is the one you want to push out to 90%-100% of your production systems.

Note

Where 23 == 2023, 02 == February, and .7 is the minor revision.