Microsoft Defender Antivirus security intelligence and product updates

[harlan4096]

March-2024 (Engine: 1.1.24030.4 | Platform: Coming soon)​

• Security intelligence update version: 1.409.1.0
  
• Release date: April 2, 2024 (Engine) / Coming soon (Platform)
  
• Engine: 1.1.24030.4
  
• Platform: Coming soon
  
• Support phase: Security and Critical Updates
  

What's new​

• Added manageability settings to opt-out for One Collector telemetry channel and Experimentation and Configuration Service (ECS).
  
• Microsoft Defender Core Service will be disabled when 3rd party Antivirus is installed (except when Defender for Endpoint is running in Passive mode).
  
• The known issue in 4.18.24020.7 where enforcement of device level access policies wasn't working as expected no longer occurs.
  
• Fixed high CPU issue caused by redetection done during Sense originating scans.
  
• Fixed an issue with Security Intelligence Update disk cleanup.
  
• Fixed an issue where the Signature date information on the Security Health report wasn't accurate.
  
• Introducted performance improvements when processing paths for exclusions.
  
• Added improvements to allow recovering from erroneously added Indicators of compromise (IoC).
  
• Improved resilience in processing attack surface reduction exclusions for Anti Malware Scan Interface (AMSI) scans.
  
• Fixed a high memory issue related to the Behavior Monitoring queue that occured when MAPS is disabled.
  
• A possible deadlock when receiving a Tamper protection configuration change from the Microsoft Defender portal no longer occurs.