Windows Defender ATP
Summary
This document outlines a method to determine if the device has Windows Defender ATP (Advanced Threat Protection) enabled.
Settings
| Detection String | Comparator | Result | Applicable OS |
|---|---|---|---|
{%-HKLM/SOFTWARE/Microsoft/Windows Advanced Threat Protection/Status:OnboardingState-%} | Equals | 1 | Windows OS |
Changelog
2025-04-10
- Initial version of the document