question

NagaVenkateshJujjavarapu-2790 avatar image
0 Votes"
NagaVenkateshJujjavarapu-2790 asked Reza-Ameri commented

Scan report for defender

How can we know that defender scanned a particular machine and when was the last scan

windows-10-securityems-advanced-threat-analytics
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

Reza-Ameri avatar image
0 Votes"
Reza-Ameri answered Reza-Ameri commented

Microsoft Defender will log scans and you may use some scripting and reviewing event viewer to see status of scan. However, in case you are using Microsoft Endpoint Manager (Intune or Configuration Manager) or Microsoft 365 Defender and Microsoft Defender for Endpoint and in the reporting dashboard , where you have a report of scanning and detection.

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

report and scanning dashboard is a predefined one or do we have to script something?

0 Votes 0 ·
Reza-Ameri avatar image Reza-Ameri NagaVenkateshJujjavarapu-2790 ·

No in case you are using Configuration Manager or Intune or other products, you already have a pre-defined dashboard and you just have to enroll your clients.
Take a look at:
https://docs.microsoft.com/en-us/mem/configmgr/protect/deploy-use/monitor-endpoint-protection
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/threat-protection-reports

0 Votes 0 ·