This policy setting allows you to configure scanning for all downloaded files and attachments. If you enable or do not configure this setting, scanning for all downloaded files and attachments will be enabled. If you disable this setting, scanning for all downloaded files and attachments will be disabled. Counter Measure: Configure this setting depending on your organizations requirements. Potential Impact: Scanning files and attachments can impact performance. Fix: (1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Defender\Real-time Protection\Scan all downloaded files and attachments (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection!DisableIOAVProtection