
It checks any files an app (including 3rd-party browsers and email clients) that attempts to download and run.
Operating system integration: Microsoft Defender SmartScreen is integrated into the Windows 10 operating system. If there's no reputation, the item is marked as a higher risk and presents a warning to the user. If a URL, a file, an app, or a certificate has an established reputation, users don't see any warnings.
It also provides reputation checks for apps, checking downloaded programs and the digital signature used to sign a file.
Reputation-based URL and app protection: Microsoft Defender SmartScreen evaluates a website's URLs to determine if they're known to distribute or host unsafe content. For more information about drive-by attacks, see Evolving Microsoft Defender SmartScreen to protect you from drive-by attacks. Because drive-by attacks can happen even if the user doesn't select or download anything on the page, the danger often goes unnoticed.
Drive-by attacks are web-based attacks that tend to start on a trusted site, targeting security vulnerabilities in commonly used software. It can also help protect against deceptive advertisements, scam sites, and drive-by attacks.
Anti-phishing and anti-malware support: Microsoft Defender SmartScreen helps to protect users from sites that are reported to host phishing attacks or attempt to distribute malicious software. Microsoft Defender SmartScreen provide an early warning system against websites that might engage in phishing attacks or attempt to distribute malware through a socially engineered attack. If the file isn't on that list, Microsoft Defender SmartScreen shows a warning, advising caution.īenefits of Microsoft Defender SmartScreen Checking downloaded files against a list of files that are well known and downloaded frequently. If it finds a match, Microsoft Defender SmartScreen shows a warning to let the user know that the site might be malicious. Checking downloaded files against a list of reported malicious software sites and programs known to be unsafe. Microsoft Defender SmartScreen determines whether a downloaded app or app installer is potentially malicious by:
Checking the visited sites against a dynamic list of reported phishing sites and malicious software sites. If Microsoft Defender SmartScreen determines that a page is suspicious, it shows a warning page to advise caution. Analyzing visited webpages and looking for indications of suspicious behavior. Microsoft Defender SmartScreen determines whether a site is potentially malicious by: Microsoft Defender SmartScreen protects against phishing or malware websites and applications, and the downloading of potentially malicious files.