5 Windows Defender Features You’re Probably Not Using (But Should Be) | by Faruk Ahmed | May, 2025
#defender#windows#features#probably
Faruk

Faruk @cyberwebpen

About: InfoSec Analyst | 10+ yrs in DLP, CrowdStrike, QRadar, Qualys, Linux Admin, WebLogic Admin | Python & Bash Enthusiast | Passionate about cybersecurity, automation, and continuous learning.

Joined:
Apr 27, 2025

5 Windows Defender Features You’re Probably Not Using (But Should Be) | by Faruk Ahmed | May, 2025

Publish Date: May 30
0 0

Member-only story

5 Windows Defender Features You’re Probably Not Using (But Should Be)

--

Share

✍️ Full Blog Content:

Intro:

If you’re still thinking of Windows Defender as “basic antivirus,” it’s time for an upgrade — in mindset. Defender has evolved into a serious endpoint protection system. But most admins I know still don’t take full advantage of what’s already available — for free. Here are 5 powerful features built into Defender that you should be using right now.

1. Controlled Folder Access (CFA)

✅ What it does: Blocks untrusted apps (including ransomware) from modifying critical files in folders like Documents, Desktop, etc.

✅ Enable it via PowerShell:

Set-MpPreference -EnableControlledFolderAccess Enabled
Enter fullscreen mode Exit fullscreen mode

✅ Add safe apps:

Add-MpPreference -ControlledFolderAccessAllowedApplications "C:\YourApp\app.exe"
Enter fullscreen mode Exit fullscreen mode

2. Attack Surface Reduction (ASR) Rules

✅ What it does: Blocks behavior typically used by malware — like Office launching PowerShell, or unsigned processes spawning binaries.

✅ Turn on rules:

Add-MpPreference…
Enter fullscreen mode Exit fullscreen mode

👉 Read Full Blog on Medium Here

Comments 0 total

    Add comment