| ID | Type | Isolation | Accessibility | RunAs |
| Microsoft.FEP.ActiveMalwareMonitorFallbackTriggerRule.LogFallbackTriggerEventWA | WriteActionModuleType | Any | Public | Microsoft.SystemCenter.LocalAgentElevatedAccount |
| Microsoft.FEP.ScriptWriteAction | WriteActionModuleType | Any | Public | |
| Microsoft.FEP.MalwareProtection.RebootWriteAction | WriteActionModuleType | Any | Public | |
| Microsoft.FEP.MalwareProtection.ActionWriteAction | WriteActionModuleType | Any | Public | Microsoft.SystemCenter.LocalAgentElevatedAccount |
| Microsoft.FEP.MalwareProtection.ActionUpdateDefinitions | WriteActionModuleType | Any | Public | |
| Microsoft.FEP.MalwareProtection.AbortScanAction | WriteActionModuleType | Any | Public | |