Defender

This reference provides functions descriptions and syntax for all Defender-specific functions. It lists the functions in alphabetical order based on the verb at the beginning of the functions.

Note

You might also hear these functions being referred to as cmdlets. They were designed to appear like cmdlets, even though they were developed as PowerShell functions.

Defender

Add-MpPreference	Modifies settings for Windows Defender.
Get-MpComputerStatus	Gets the status of antimalware software on the computer.
Get-MpPreference	Gets preferences for the Windows Defender scans and updates.
Get-MpThreat	Gets the history of threats detected on the computer.
Get-MpThreatCatalog	Gets known threats from the definitions catalog.
Get-MpThreatDetection	Gets active and past malware threats that Windows Defender detected.
Remove-MpPreference	Removes exclusions or default actions.
Remove-MpThreat	Removes active threats from a computer.
Set-MpPreference	Configures preferences for Windows Defender scans and updates. Note You need to run this cmdlet in an elevated PowerShell window (a PowerShell window you opened by selecting Run as administrator).
Start-MpScan	Starts a scan on a computer.
Start-MpWDOScan	Starts a Windows Defender offline scan.
Update-MpSignature	Updates the antimalware definitions on a computer.