Microsoft Defender for Endpoint

Question

Hi,

We have an hybrid environment with SCCM and Microsoft Defender For Endpoint.

Exceptions are configured, but what is the correct command to list them out locally on the server.

This command works, it gives me the complete list

Get-MpPreference | Select-Object -Property ExclusionPath -ExpandProperty ExclusionPath

This commando does not work, it does not give me the complete list

Get-MpPreference | Select-Object -Property ExclusionProcess

output:

PS C:\Windows\system32> Get-MpPreference | Select-Object -Property ExclusionProcess

ExclusionProcess

---

{CcmAADBroker.exe, Ccmexec.exe, Ccmrepair.exe, Ccmsetup.exe...}

if I add -ExpandProperty ExclusionPath it only shows the ExclusionPath catalogs and files

So what I want is the complete list of the excluded processes.

Thanks for answers..

/R

Andy

Answer 1

Hi,

PowerShell just doesn't display more than the value of $FormatEnumerationLimit items. So, you could set that to a higher value to show the complete list.

$FormatEnumerationLimit=15