MT.1156 - Scanning Network Files should be enabled
Overview
Verify that scanning network files is enabled despite SMB load considerations.
Disabled network file scanning creates attack vectors through shared files.
Remediation action:
- Open Microsoft Endpoint Manager > Endpoint Security > Antivirus
- Edit the relevant Microsoft Defender Antivirus policy
- Enable Allow Scanning Network Files
Related links
Test Metadata
| Field | Value |
|---|---|
| Test ID | MT.1156 |
| Severity | High |
| Suite | Maester |
| Category | Defender |
| PowerShell test | Test-MtMdeNetworkFileScanning |
| Tags | Defender, Maester, MT.1156 |
Source
- Pester test:
tests/Maester/Defender/Test-MtMdeAntivirusPolicy.Tests.ps1 - PowerShell source:
powershell/public/maester/defender/Test-MtMdeNetworkFileScanning.ps1