Microsoft Defender Antivirus security intelligence and product updates

[harlan4096]

September-2024 (Platform: 4.18.24090.11 | Engine 1.1.24090.11)​

• Security intelligence update version: 1.421.12.0
  
• Release date: October 30, 2024 (Engine and Platform)
  
• Platform: 4.18.24090.11
  
• Engine: 1.1.24090.11
  
• Support phase: Security and Critical Updates
  

What's new​

• Improved detection logic to reduce false positives related to the ASR rule, Block Office applications from injecting code into other processes
  
• Resolved an issue that could lead to a Windows device to be marked as non-compliant in Intune when Microsoft Defender Antivirus starts.
  
• Resolved an issue with catchup scan configuration, where the DaysUntilAggressiveCatchupQuickScan policy setting was not honored.
  
• Fixed SharedSignatureRoot processing when an empty value was set.
  
• Fixed a problem with device control where certain file systems (like FAT, FAT32, exFAT) with volume information displayed when a blocking rule was defined.
  
• Improved performance in specific scenarios where network files were accessed.
  
• Fixed an issue with Azure Virtual Desktop where the Intune policy was not being honored.
  
• Fixed potential deadlock for custom detection rules on the Windows client
  
• Resolved an issue where antivirus exclusions were not being honored with AMSI.
  
• Fixed issue impacting a subset of devices where antivirus exclusions configured through SCCM were not honored
  

Microsoft Defender Antivirus security intelligence and product updates - Microsoft Defender for Endpoint