This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 2%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ED%3C/text%3E%3C/svg%3E)
When using Microsoft Graph API on /deviceManagement/managedDevices/<DEVICE_ID>?$expand=detectedApps/, I'm unable to see Windows Defender as a detected app. Why is that?
Other Intune-related topics, including unsupported scenarios and platform-specific behaviors
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 69%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERJ%3C/text%3E%3C/svg%3E)
Can we take a step back and understand the requirement? What are you trying to accomplish here? Is this anything to do with Defender for Endpoint onboarding?
Hi @Rahul Jindal -- Thanks for helping! I'm trying to detect if my employee's computer has an antivirus installed through the Graph API. When using detectedApps, I can get an inventory of all my employee's apps, but Windows Defender does not show up.
How can I verify through the Graph API that this employee device has antivirus installed? Is there a difference if it's Windows Defender vs other Antivirus?
In that case I agree with @Lu Dai-MSFT . Defender is inbuilt in the Windows 10 OS and not installed separately. In order to get status or the presence of the Defender component, you can probably run a proactive remediation script in Intune to run for the detection of the Windefend service running or the status of the AV component itself. Get-MPComputerStatus will be a good place to start with.
@David Thanks for posting in our Q&A.
For this issue, the data in Graph detectedApps is the same in discovered apps in intune portal. For intune discovered apps, I will share some information with you:
It means not all apps will list in discovered apps. Based on my understanding, Windows Defender may not be the appropriate app type.
Thanks for understanding.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
@Lu Dai-MSFT Thanks for the quick response!
Thanks again!
@David Thanks for your update.
Microsoft Defender is built into windows 10, it's different from other apps that require manual installation. For how to detecting it, I have no idea. Please don't worry, the forum is an open platform. Let's wait someone else will provide some ideas.
Or it is better to create an online support ticket to handle this issue more effectively. Here is the online support link and hope it helpful.
https://learn.microsoft.com/en-us/mem/intune/fundamentals/get-support
Thanks for understanding.