Adaptive Threat Protection settings determine when a file or process is allowed to run, and if it is contained, cleaned, blocked, or the user is prompted. You can also use these settings to enable ML Protect, enhanced remediation, and enhanced script scanning with AMSI.
Task
Select Menu → Policy → Policy Catalog, then select Endpoint Security Adaptive Threat Protection from the Products list in the left pane.
From the Category list in the right pane, select Options.
Click the Edit link for an editable policy.
Click Show Advanced.
Configure settings on the page, then click Save.