What is the UEFI Scanner that comes in Windows 10

Windows Defender, now officially called Microsoft Defender, it is becoming more and more powerful. So more and more users are using Microsoft Protection application replacing third-party protection software.

The latest antivirus tests show that Microsoft Defender's performance is in line with the most powerful productthe security of third-party manufacturers.

But Microsoft does not stop there. Microsoft Defender Advanced Threat Protection (Microsoft ATP) has a UEFI scanner.

In other words, the Microsoft security application can now detect malicious λογισμικό που έχει εισαχθεί στο firmware της συσκευής, προσθέτοντας έτσι ένα νέο επίπεδο ασφαλείας σε όλες τις συσκευές που τρέχουν με Windows 10.

Malware infected with malware is very difficult to detect, as the malware starts before the operating system starts and of course the security software. So in most cases, this malware cannot be detected.

Microsoft he says that the UEFI scanner has been built with help from chipset manufacturers, who have contributed “insights”, allowing Microsoft Defender ATP to scan the system firmware files to determine if there is a malware risk or not.

UEFI scanner comes with three important components namely an engine detectionthat can help find exploits and malicious behavior, a full file system scanner that carefully checks every piece of code inside the firmware, and a UEFI Anti-Rootkit that uses the Serial Peripheral Interface (from Serial Peripheral Interface or simply SPI) to access to firmware.

When firmware-level malware is detected, the Microsoft Defender Security Center will display more information than a typical infected file.

Microsoft explains that the UEFI scanner is a natural evolution of all security enhancements to Microsoft Defender ATP, and that more and more such updates will be added.

Microsoft Defender is offered as default security application on all Windows 10 devices, and during the installation of the operating system, the anti-virus mechanism is automatically activated.