AV Scan & Update response action
In this update we're delivering a preview of the a new Update & Scan response capability, enabling SOC operators to trigger a full or quick scan using the latest definitions, remain informed of MW infections that were not previously detected and remediate them.
MW detections resulting from the scan will surface to the portal similarly to RTP or self-initiated scan detections today.
This new capability is applicable on Windows 10 endpoints running the Creators update or above.
"Run AntiVirus scan" action available in the Machine page
Select the scan type
Action center reflects status
Timeline reflects actions taken
Microsoft Defender for Endpoint disrupts ransomware with industry-leading endpoint security, providing comprehensive protection across all platforms and devices.