Skip to main content
Version: 2.1.1-preview

MT.1162 - Cloud Extended Timeout should be 30-50 seconds

Boris Drogja
Contributed by Boris DrogjaAll contributors →

Overview​

Checks that the cloud extended timeout is configured between 30-50 seconds in all assigned Microsoft Defender Antivirus policies.

Insufficient cloud timeout may prevent thorough analysis of suspicious files, allowing potentially malicious content to bypass cloud-based detection.

Remediation action:​

  1. Open Microsoft Endpoint Manager > Endpoint Security > Antivirus
  2. Edit the relevant Microsoft Defender Antivirus policy
  3. Set Cloud Extended Timeout to 30-50 seconds

Test Metadata​

FieldValue
Test IDMT.1162
SeverityHigh
SuiteMaester
CategoryDefender
PowerShell testTest-MtMdeCloudExtendedTimeout
TagsDefender, Maester, MT.1162

Source​

  • Pester test: tests/Maester/Defender/Test-MtMdeAntivirusPolicy.Tests.ps1
  • PowerShell source: powershell/public/maester/defender/Test-MtMdeCloudExtendedTimeout.ps1