New Microsoft Defender Antivirus services on Windows Devices

New Microsoft Defender Antivirus services on Windows Devices

Microsoft Defender Antivirus on Windows 10 and Windows 11 will be shipping with a new service:

• Microsoft Defender Core service.

When this will happen:

Microsoft will roll out to all rings (Current Channel (Preview), Current Channel (Staged) and Current Channel (Broad)) during the week of March 11th, 2024.

How this will affect your organization:

To enhance your endpoint security experience, Microsoft is shipping the Microsoft Defender Core service which will help with stability and performance of Microsoft Defender Antivirus.

What you need to do to prepare:

1. Update the Platform Update to the latest version 4.18.23110.0 or newer
2. Allow the following URL’s:
   • Commercial:
     • *.events.data.microsoft.com
     • *.endpoint.security.microsoft.com
     • *.ecs.office.com
   • For US Gov, the ECS URL’s are:
     • GCC Mod: *.gccmod.ecs.office.com
     • GCC High: *.config.ecs.gov.teams.microsoft.us
     • DOD: *.config.ecs.dod.teams.microsoft.us
3. If using an Application Control application or running a 3rd party AV and/or EDR, add the following process to the allowed list.
   • Microsoft Defender Core Service – MdCoreSvc – MpDefenderCoreService.exe