Microsoft Is About to Add a Useful Security Feature to Windows 10 to Help

This guide provides a practical overview of Microsoft Is About to Add a Useful Security Feature to Windows 10 to Help, including its main features, benefits, limitations, and important considerations.

Specifically, on June 18, Microsoft officially announced that it will add the UEFI scanner feature in the Defender Advanced Threat Protection tool (Defender ATP) to enhance an additional layer of active security. helps detect software attacks early on Windows 10. In other words, Microsoft Defender ATP will soon be able to detect malware entering the system through firmware updates.

In theory, malware that infects the firmware level is often difficult to detect because it is launched before the Supported operating systems boots. Microsoft's new UEFI scanning engine was created to solve this problem, by actively interacting directly with the motherboard chipset and reading the firmware's file system when it is launched.

In general, this new tool will use the following components and solutions to deploy dynamic analysis at the firmware level:

• UEFI anti-rootkit, helps access firmware via Serial Peripheral Interface.
• Full file system scanner, which helps check the content inside the firmware.
• A detection tool that helps identify all signs of malicious code and malicious behavior in firmware.

In case malware is detected at the firmware level, users will receive security alerts displayed in the Defender Security Center. Here, the system will give the results of threat analysis and take appropriate steps to respond to suspicious activity in the system at each level.

IT (enterprise-class) security groups can also use the advanced scanning capabilities in Microsoft Defender ATP to hunt for these complex threats. According to Microsoft, the new security tool mentioned above is an essential part of the policy to improve security efficiency in Microsoft Defender ATP, and users can expect many such exciting new features in the future. Microsoft Defender ATP is now provided as the default security application on all Windows 10 devices and when installing the Supported operating systems, this antivirus tool will also be automatically activated.