In Microsoft Endpoint Manager admin center - Endpoint Security - Antivirus policy under Real-time Protection there's an option to enable Intrusion Prevention: ![81255-intrusion-prevention.png][1] [1]: /answers/storage/attachments/81255-intrusion-prevention.png The Learn More link takes you to Network Protection, https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-defender#defender-enablenetworkprotection Is that the same thing? If not, is there a list of intrusion prevention signatures and/or can you customize it somehow? Thanks