Active malware in Intune Admin center

Question

Hi, We recently discovered that in our Intune admin Center we see "active malware" (section Endpoint security | Antivirus). We had run full AV scan but it didn´t find anything. Also in endpoint console we don´t see any active "alerts/incidents" for that specific device. Any suggestion? Thanks Tomas

Answer 1

hello,

is it possible to configure email notificaciones for when Active malware is detected on endpoints?

thank you.

Answer 2

@Bello Tomáš, Thanks for posting in Q&A. From your description, I know there are active malware under Endpoint security->Antivirus. But we didn't find anything after doing full scan and check under Defender endpoint console.

To check the details, we suggest go to Endpoint security->Antivirus->Active Malware to see the detailed information like the Malware state, Category, Malware name, Last state change, Evaluation state and so on.

Please check on this and if there's any update, feel free to let us know.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.