macOS configuration profile which enables full tamper protection for Microsoft Defender

gistfile1.txt

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1">
   <dict>
      <key>PayloadUUID</key>
      <string>E21D6405-FA0F-46D2-84DE-33775762DD7E</string>
      <key>PayloadType</key>
      <string>Configuration</string>
      <key>PayloadOrganization</key>
      <string>Company Name</string>
      <key>PayloadIdentifier</key>
      <string>com.microsoft.wdav</string>
      <key>PayloadDisplayName</key>
      <string>Enabling Tamper Protection for Microsoft Defender</string>
      <key>PayloadDescription</key>
      <string>Microsoft Defender tamper protection configuration settings</string>
      <key>PayloadVersion</key>
      <integer>1</integer>
      <key>PayloadEnabled</key>
      <true />
      <key>PayloadRemovalDisallowed</key>
      <true />
      <key>PayloadScope</key>
      <string>System</string>
      <key>PayloadContent</key>
      <array>
         <dict>
            <key>PayloadUUID</key>
            <string>C3934617-C698-4A88-819D-47377A35D4F3</string>
            <key>PayloadType</key>
            <string>com.microsoft.wdav</string>
            <key>PayloadOrganization</key>
            <string>Microsoft</string>
            <key>PayloadIdentifier</key>
            <string>com.microsoft.wdav</string>
            <key>PayloadDisplayName</key>
            <string>Microsoft Defender tamper protection configuration settings</string>
            <key>PayloadDescription</key>
            <string />
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>PayloadEnabled</key>
            <true />
            <key>tamperProtection</key>
            <dict>
               <key>enforcementLevel</key>
               <string>block</string>
            </dict>
         </dict>
      </array>
   </dict>
</plist>