diff --git a/docs/getting-started/configure-integration-policy.asciidoc b/docs/getting-started/configure-integration-policy.asciidoc
index 726b6f3d50..a7113435ef 100644
--- a/docs/getting-started/configure-integration-policy.asciidoc
+++ b/docs/getting-started/configure-integration-policy.asciidoc
@@ -206,10 +206,12 @@ image::images/install-endpoint/event-collection.png[Detail of event collection s
 == Register {elastic-sec} as antivirus (optional)
 
 With {elastic-defend} version 7.10 or later on Windows 7 or later, you can
-configure {elastic-sec} as your antivirus software by turning on **Register as antivirus**.
+register {elastic-sec} as your hosts' antivirus software by enabling **Register as antivirus**.
 
 NOTE: Windows Server versions are not supported. Antivirus registration requires Windows Security Center, which is not included in Windows Server operating systems.
 
+You can also choose **Sync with malware protection level** to automatically set antivirus registration based on how you've configured {elastic-defend}'s <<malware-protection,malware protection>>. If malware protection is turned on and set to **Prevent**, antivirus registration will also be enabled; in any other case, antivirus registration will be disabled.
+
 [role="screenshot"]
 image::images/register-as-antivirus.png[Detail of Register as antivirus option.]
 
diff --git a/docs/getting-started/images/register-as-antivirus.png b/docs/getting-started/images/register-as-antivirus.png
index 4d9aaa8f77..25a12eea74 100644
Binary files a/docs/getting-started/images/register-as-antivirus.png and b/docs/getting-started/images/register-as-antivirus.png differ