ProtectionStatus

Antimalware installation info and security health status of the machine:

Table attributes

Attribute	Value
Resource types	microsoft.compute/virtualmachines, microsoft.conenctedvmwarevsphere/virtualmachines, microsoft.azurestackhci/virtualmachines, microsoft.scvmm/virtualmachines, microsoft.compute/virtualmachinescalesets
Categories	Security
Solutions	AntiMalware, Security, SecurityCenter, SecurityCenterFree
Basic log	No
Ingestion-time transformation	Yes
Sample Queries	Yes

Column	Type	Description
AMProductVersion	string
_BilledSize	real	The record size in bytes
Computer	string
ComputerEnvironment	string
ComputerIP_Hidden	string
DetectionId	string
DeviceName	string
_IsBillable	string	Specifies whether ingesting the data is billable. When _IsBillable is `false` ingestion isn't billed to your Azure account
ManagementGroupName	string
OSName	string
ProtectionStatus	string
ProtectionStatusDetails	string
ProtectionStatusRank	int
Resource	string
ResourceGroup	string
ResourceId	string
_ResourceId	string	A unique identifier for the resource that the record is associated with
ResourceProvider	string
ResourceType	string
ScanDate	datetime
SignatureVersion	string
SourceComputerId	string
SourceSystem	string	The type of agent the event was collected by. For example, `OpsManager` for Windows agent, either direct connect or Operations Manager, `Linux` for all Linux agents, or `Azure` for Azure Diagnostics
SubscriptionId	string
_SubscriptionId	string	A unique identifier for the subscription that the record is associated with
TenantId	string	The Log Analytics workspace ID
Threat	string
ThreatStatus	string
ThreatStatusDetails	string
ThreatStatusRank	int
TimeGenerated	datetime
Type	string	The name of the table
TypeofProtection	string
VMUUID	string