


Modifies several parameters of Windows Defender configuration to perform a custom scheduled scan of devices. 1.0.2.0 - Removed the default execution triggers for API and Manual.Should be used only on devices without any 3rd party security software which replaces Windows Defender, otherwise update process is unavailable.This script is only compatible with Windows 10 and Windows 11.If set to 'false' it will update directly from Microsoft. If set to 'true' it will update from an internal service such as WSUS or System Center. Maximum random delay set to avoid overloading the network. The script should be executed manually.Ī timeout of 840 seconds is recommended. Execution context and suggested scheduling If the device does not have the last version of the Windows Defender malware or spyware definition, it will force an update. 2.0.0.0 - Code refactored and added input parameter "InternalUpdateServer".2.0.1.0 - Removed the default execution triggers for API and Manual.Should be used only on devices without any 3rd party security software which replaced Windows Defender, otherwise information is unreliable.If on access protection is enabled or not If network inspection system is enabled or not If Internet downloads, Outlook and attachments protection is enabled or not If behavior monitor component is enabled or not If anti virus protection is enabled or not If anti spyware protection is enabled or not Number of days since the last network inspection system definition update Number of days since the last anti virus definition update Number of days since the last anti spyware definition update Number of days since that the last quick scan was performed

Number of days since that the last full scan was performed Version of the Windows Defender Engine component The script should be executed every 1 day.Ī timeout of 120 seconds is recommended. Provides a set of fields with information about engine, product version, full and quick scans age, definition files (last update) and status of several components. 1.0.1.0 - Removed the default execution triggers for API and Manual.
