Reply to thread

Message

<blockquote data-quote="SeriousHoax" data-source="post: 1101494" data-attributes="member: 78686">Sorry I didn&#039;t see the post before. But yeah, changing cloud protection level will have an impact on malware detection. On default cloud protection level, files with 90% malicious certainty by the cloud ML are detected which is enough for most samples. High put it down to 80% so would detect more. High plus/equivalent to Highest in Configure Defender should lower it down further. I haven&#039;t found any document/blog where Microsoft shared the exact value of High plus but it&#039;s probably 70%. But Microsoft states that putting it to High plus might affect client performance and I can confirm that it surely does for some apps on my system and also for some downloaded files. It also twice produced false positives with Epic Games a couple of years ago and few more here and there. So, protection and false positives both will increase. Setting cloud protection to Zero tolerance made MD detect more in Shadowra&#039;s quick testing compared to my test with the same sample on default settings. Personally, I just keep it on default as I&#039;m kind of an expert user who knows how to avoid malware even when I need to dazzle into the world of piracy. Currently I&#039;m using everything on default (except cloud timeout is set to 60 seconds instead of default 10), not even ASR rules <img class="smilie smilie--emoji" loading="lazy" alt="😛" title="Face with tongue&nbsp; &nbsp; :stuck_out_tongue:" src="https://cdn.jsdelivr.net/joypixels/assets/6.6/png/unicode/64/1f61b.png" data-shortname=":stuck_out_tongue:" />But keep in mind that for MD&#039;s cloud protection to properly work, files must have Mark of the Web.This is not related to protection. It&#039;s not needed for home users.</blockquote>

[QUOTE="SeriousHoax, post: 1101494, member: 78686"] Sorry I didn't see the post before. But yeah, changing cloud protection level will have an impact on malware detection. On default cloud protection level, files with 90% malicious certainty by the cloud ML are detected which is enough for most samples. High put it down to 80% so would detect more. High plus/equivalent to Highest in Configure Defender should lower it down further. I haven't found any document/blog where Microsoft shared the exact value of High plus but it's probably 70%. But Microsoft states that putting it to High plus might affect client performance and I can confirm that it surely does for some apps on my system and also for some downloaded files. It also twice produced false positives with Epic Games a couple of years ago and few more here and there. So, protection and false positives both will increase. Setting cloud protection to Zero tolerance made MD detect more in Shadowra's quick testing compared to my test with the same sample on default settings. Personally, I just keep it on default as I'm kind of an expert user who knows how to avoid malware even when I need to dazzle into the world of piracy. Currently I'm using everything on default (except cloud timeout is set to 60 seconds instead of default 10), not even ASR rules 😛 But keep in mind that for MD's cloud protection to properly work, files must have Mark of the Web. This is not related to protection. It's not needed for home users. [/QUOTE]

Verification