Define the rate of detection events for logging

admin

This policy setting limits the rate at which detection events for network protection against exploits of known vulnerabilities will be logged. Logging will be limited to not more often than one event per the defined interval. The interval value is defined in minutes. The default interval is 60 minutes. If you enable this setting detection events will not be logged if there is more than one similar report (by definition GUID) in the specified number of minutes. If you disable or do not configure this setting detection events will be logged at the default rate.

You May Also Like

More From Author

2Comments

Add yours
  1. 1
    Registry path is:

    HKEY_LOCAL_MACHINE -> Software -> Policies -> Microsoft -> Windows Defender -> NIS -> Consumers -> IPS # ThrottleDetectionEventsRate; HKEY_LOCAL_MACHINE -> Software -> Policies -> Microsoft -> Windows Defender -> NIS -> Consumers -> IPS # ThrottleDetectionEventsRate

  2. 2
    The Administrative Template path is:

    Windows Components -> Windows Defender -> Network Inspection System

Comments are closed.