Microsoft Defender ATP will include Tamper protection

In a recent update of the official blog post, Microsoft detailed a new feature that will be introduced to the Microsoft security product Microsoft Defender ATP, Tamper Protection. Tamper Protection is now available as a new setup option in Windows Security applications, “provides additional protections against changes to key security features, including limiting changes that are not made directly through the app.”

This feature is available for Windows 10 Home and Enterprise users and has been tested on the Windows Insider project for approximately two months.

After enabling this feature, other apps will be blocked from changing:

  • Real-time protection, which is the core antimalware scanning feature of Microsoft Defender ATP next gen protection and should rarely, if ever, be disabled
  • Cloud-delivered protection, which uses our cloud-based detection and prevention services to block never-before seen malware within seconds
  • IOAV, which handles the detection of suspicious files from the Internet
  • Behavior monitoring, which works with real-time protection to analyze and determine if active processes are behaving in a suspicious or malicious way and blocks them

This feature will become the default and will be open to all users via Windows 10 April 2019 (19H1).