Forum Discussion

Lamiakk's avatar
Lamiakk
Copper Contributor
Nov 12, 2024

Get-MpPerformanceReport results meaning

Does anyone know what are the options and their meaning for results in "Scan Type" column when reading etl report via Get-MpPerformanceReport -TopScans parameter? I have a result where all lines are described as "FileScan" but I have not found explanation in the documentation to the meaning of this description or any possible other results.

  • am1357's avatar
    am1357
    Brass Contributor

    I've noticved "FileScan" too (besides RealTimeScan and OnDemandScan) but it was related to OneDrive files in temp folders, e.g. C:\Windows\Temp. Where are those files located with ScanType "FileScan"?

    • Lamiakk's avatar
      Lamiakk
      Copper Contributor

      AppData\Roaming\Microsoft cache and in another sample ProgramData\Package Cache on C: drive - so similar experience I guess

Resources