Defender for Endpoint · Microsoft 365 Security Checkliste

Skillplan M365 Checklist

2026-07-20 19:28

Bewertungsfortschritt 0 / 136 Elemente 0%

Bisherige Erfüllung 0 / 0 Kontrollen 0%

Enable Tamper Protection for every onboarded device.

Enable all Attack Surface Reduction (ASR) rules in audit mode first; promote to block after monitoring.

Onboard every Windows 10/11 and Server 2019+ device into Defender for Endpoint within 7 days of deployment.

Enable Automatic Investigation and Response with 'Full - remediate threats automatically' for low-risk machines.

Configure Web content filtering for known malicious and policy-violating categories.

Enable Device discovery to catch unmanaged devices on the same network as managed assets.

Require Microsoft Defender Antivirus cloud-delivered protection on every device.

Restrict AV exclusions to Microsoft-recommended guidance; reject ad-hoc business exclusions without review.