▲ 3 r/DefenderATP
Running scan status
SOC team needs to know the current status of the scan they initiated on the machine from the portal. The AMRunningQuickScan remains blank even if the machine is running a quick scan.
Get-MpComputerStatus | Select-Object `
AntivirusEnabled,
RealTimeProtectionEnabled,
IsTamperProtected,
AMRunningFullScan,
AMRunningQuickScan,
FullScanAge,
QuickScanAge,
QuickScanEndTime,
LastFullScanSource,
LastQuickScanSource,
AntivirusSignatureAge,
AntivirusSignatureVersion
Is there a better way to get the status info please?
u/True-Agency-3111 — 6 days ago