Enable File Hash Computation

[Degerlunden]

I haven't been able to find if "File Hash Computation" is set to enabled anywhere in the OiB policies.

The recommendation is to enable "File Hash Computation" in settings catalogue. Setting name is "Enable File Hash Computation" in the Defender section. It should be a device policy.

Recommendation according to CIS
https://www.tenable.com/audits/items/CIS_MS_Windows_10_Enterprise_Level_2_Bitlocker_v1.12.0.audit:c668065c4f92b80ff77ad9691522a2e2

Thanks in advance!

[SkipToTheEndpoint]

Can confirm it's also in the Intune L2: https://www.tenable.com/audits/items/CIS_Microsoft_Intune_for_Windows_11_v3.0.1_L2.audit:9cc008f490ff66fd47711e50ed3eda99

So this setting isn't available in the Endpoint Security>Antivirus template, and while it could go into the Defender Additional Configuration policy, the reason I've held off on this one was that it's part of their L2 policies, I imagine because of the note:

Note: The impact of this setting should be monitored closely during deployment to ensure user and system performance impact is within acceptable limits.

I'd rather not be the cause for poor device performance 😉

People are obviously welcome to deploy additional policies or customise them as they wish, though!