Forum Discussion
AmjadGov
Nov 25, 2021Copper Contributor
Help with machine is using out of date antimalware client version in the organization script
This is the script provided by Microsoft to know which machine is using out of date antimalware client version in the organization: //check the antimalware client version DeviceFileEvents |wher...
- Nov 29, 2021That didn't work, but thanks for trying. I managed to find another way to fix the issue. As the device name also contains the UPN, I used the follow example to get it to work:
|where FileName == "MsMpEng.exe" and DeviceName contains "contoso"
AnuragSrivastava
Nov 29, 2021Iron Contributor
AmjadGov
That was just a dummy keyword for domain name. Presently I could also "nt authority" in the domain name field and not the actual domain name.
That was just a dummy keyword for domain name. Presently I could also "nt authority" in the domain name field and not the actual domain name.
AmjadGov
Nov 29, 2021Copper Contributor
That didn't work, but thanks for trying. I managed to find another way to fix the issue. As the device name also contains the UPN, I used the follow example to get it to work:
|where FileName == "MsMpEng.exe" and DeviceName contains "contoso"
|where FileName == "MsMpEng.exe" and DeviceName contains "contoso"