Intune/intune/Externally Sourced Remediations/MicrosoftDefenderAV/Get-RealTimeProtection/Detect_RealTimeProtection.ps1

if((Get-MpComputerStatus).RealTimeProtectionEnabled  -eq "True") {
    Write-Output "Device Compliant"
    exit 0
} else {
    Write-Output "Device Non-Compliant"
    exit 1
}