Turn on process scanning whenever real-time protection is enabledID: oval:org.secpod.oval:def:56941 | Date: (C)2019-07-06 (M)2023-07-04 |
Class: COMPLIANCE | Family: windows |
This policy setting allows you to configure process scanning when real-time protection is turned on. This helps to catch malware which could start when real-time protection is turned off.
If you enable or do not configure this setting, a process scan will be initiated when real-time protection is turned on.
If you disable this setting, a process scan will not be initiated when real-time protection is turned on.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Defender\Real-time Protection!Turn on process scanning whenever real-time protection is enabled
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection!DisableScanOnRealtimeEnable
Platform: |
Microsoft Windows Server 2019 |