51 lines
2.8 KiB
Markdown
51 lines
2.8 KiB
Markdown
## Microsoft Defender AV
|
|
|
|
### Get-CloudDeliveredProtection
|
|
[Link](https://github.com/AntoPorter/Intune-Remediations/tree/main/MicrosoftDefenderAV/Get-CloudDeliveredProtection)
|
|
- **Detection**: Checks if Cloud-Delivered Protection is enabled.
|
|
- **Remediation**: Enables Cloud-Delivered Protection if it is disabled.
|
|
|
|
### Get-ExploitProtection
|
|
[Link](https://github.com/AntoPorter/Intune-Remediations/tree/main/MicrosoftDefenderAV/Get-ExploitProtection)
|
|
- **Detection**: Checks if Exploit Protection is enabled.
|
|
- **Remediation**: Enables Exploit Protection if it is disabled.
|
|
|
|
### Get-NetworkProtection
|
|
[Link](https://github.com/AntoPorter/Intune-Remediations/tree/main/MicrosoftDefenderAV/Get-NetworkProtection)
|
|
- **Detection**: Checks if Network Protection is enabled.
|
|
- **Remediation**: Enables Network Protection if it is disabled.
|
|
|
|
### Get-PUAProtection
|
|
[Link](https://github.com/AntoPorter/Intune-Remediations/tree/main/MicrosoftDefenderAV/Get-PUAProtection)
|
|
- **Detection**: Checks if PUA Protection is enabled.
|
|
- **Remediation**: Enables PUA Protection if it is disabled.
|
|
|
|
### Get-QuickScan
|
|
[Link](https://github.com/AntoPorter/Intune-Remediations/tree/main/MicrosoftDefenderAV/Get-QuickScan)
|
|
- **Detection**: Performs a Quick Scan via Defender AV on the endpoint.
|
|
- **Remediation**: Performs a Full Scan if malware is detected during the Quick Scan.
|
|
|
|
### Get-RealTimeBehaviour
|
|
[Link](https://github.com/AntoPorter/Intune-Remediations/tree/main/MicrosoftDefenderAV/Get-RealTimeBehaviour)
|
|
- **Detection**: Checks if Real Time Behaviour is enabled.
|
|
- **Remediation**: Enables Real Time Behaviour if it is disabled.
|
|
|
|
### Get-RealTimeProtection
|
|
[Link](https://github.com/AntoPorter/Intune-Remediations/tree/main/MicrosoftDefenderAV/Get-RealTimeProtection)
|
|
- **Detection**: Checks if Real Time Protection is enabled.
|
|
- **Remediation**: Enables Real Time Protection if it is disabled.
|
|
|
|
### Get-ScheduledScan
|
|
[Link](https://github.com/AntoPorter/Intune-Remediations/tree/main/MicrosoftDefenderAV/Get-ScheduledScan)
|
|
- **Detection**: Checks if a Scheduled AV Scan is present on the Endpoint.
|
|
- **Remediation**: Configures a Daily Quick Scan and Weekly Full Scan if no scan is present on the Endpoint.
|
|
|
|
### Get-SecurityIntelligenceUpdates
|
|
[Link](https://github.com/AntoPorter/Intune-Remediations/tree/main/MicrosoftDefenderAV/Get-SecurityIntelligenceUpdates)
|
|
- **Detection**: Checks if Security Intelligence Updates are current on the Endpoint.
|
|
- **Remediation**: Runs a Security Intelligence Updates if the device is found not to be running a recent version of Security Intelligence Updates.
|
|
|
|
### Get-TamperProtection
|
|
[Link](https://github.com/AntoPorter/Intune-Remediations/tree/main/MicrosoftDefenderAV/Get-TamperProtection)
|
|
- **Detection**: Checks if Tamper Protection is enabled.
|
|
- **Remediation**: Enables Tamper Protection if it is disabled. |