Defender for Endpoint · Checklist Sicurezza Microsoft 365

Skillplan M365 Checklist

2026-07-20 19:28

Avanzamento valutazione 0 / 136 elementi 0%

Conformità finora 0 / 0 controlli 0%

Enable Tamper Protection for every onboarded device.

Enable all Attack Surface Reduction (ASR) rules in audit mode first; promote to block after monitoring.

Onboard every Windows 10/11 and Server 2019+ device into Defender for Endpoint within 7 days of deployment.

Enable Automatic Investigation and Response with 'Full - remediate threats automatically' for low-risk machines.

Configure Web content filtering for known malicious and policy-violating categories.

Enable Device discovery to catch unmanaged devices on the same network as managed assets.

Require Microsoft Defender Antivirus cloud-delivered protection on every device.

Restrict AV exclusions to Microsoft-recommended guidance; reject ad-hoc business exclusions without review.