Query About Windows Defender Versioning

Question

Hi there,

I was lately playing around with Windows Powershell and Defender and have a small query,

As to What happens whneverwh each time we update the Defender and how does the versioning gets a name?

(According to the docs its a hashed version of a string..)

EngineVersion - 1.1.12603.0

AppVersion      -  4.9.10586.0

AvSigVersion . - 1.217.1014.0

Also, were exactly Can i find the total number of threats detected by it?(like how many can it detect, not only for yhe version i am using, but for different bersions as well..)

Like After i updated and used powershell and ran this,

Get-MpThreatCatalog | measure to get the count,(like how many the current signature can detect)

So is there anywhere where Microsoft shows

the count for the different Signature versions?

(I have checked the latest release notes webpage, that just shows top 20 versions and whether any new Threat was added and assigned an id to it ...)

Thanks!

Answer 1

Hi Aditya

The Version Info section will show few elements and their corresponding version numbers. For example, the number alongside Antimalware client version signifies the version of Windows Defender you have on your machine. All other versions apply to various components of the antivirus software like antivirus and antispyware definition.

Well here's my doubt

• Visit this MS link on release notes Defender Signature
• And Then please Visit this MS Link on release notes Defender Signature

(Top 2 Signatures as MS Says..) (So what's going on?)

So here's my Query ->

-  What's the difference b/w the two as I can't see any  **New Definitions** as well as nothing new in the

**Updated definitions** as well...

But still we have two different Signatures?

Thanks!!!

Answer 2

Hi Aditya

The Version Info section will show few elements and their corresponding version numbers. For example, the number alongside Antimalware client version signifies the version of Windows Defender you have on your machine. All other versions apply to various components of the antivirus software like antivirus and antispyware definition.

Thanks for your very very quick reply!

But i was wondering as to how they are named by MS?

Like for the OsBuild **10.0.18305.1003,**I have read on MS Docs that this string is formed has it subparts like

• Major version 10
• Minor version 0
• Build number 18305
• Build revision 1003
• So i was wondering if something similar applies to Windows Defender releases as well ?
• And also anywhere where MS displays what's the total count that MS Defender's can detect?

Thanks Again!

Answer 3

Hi Aditya

The Version Info section will show few elements and their corresponding version numbers. For example, the number alongside Antimalware client version signifies the version of Windows Defender you have on your machine. All other versions apply to various components of the antivirus software like antivirus and antispyware definition.