SOLVED

where can I see the "detection build id/number"?

%3CLINGO-SUB%20id%3D%22lingo-sub-2735620%22%20slang%3D%22en-US%22%3Ewhere%20can%20I%20see%20the%20%22detection%20build%20id%2Fnumber%22%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2735620%22%20slang%3D%22en-US%22%3E%3CP%3EWhere%20can%20I%20see%20the%20%22detection%20build%20id%2Fnumber%22.%20For%20example%2C%20at%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fmsrc.microsoft.com%2Fupdate-guide%2Fvulnerability%2FCVE-2021-40444%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmsrc.microsoft.com%2Fupdate-guide%2Fvulnerability%2FCVE-2021-40444%3C%2FA%3E%20it%20says%3B%20%22%3CSPAN%3EEnterprise%20customers%20who%20manage%20updates%20should%20select%20the%20detection%20build%201.349.22.0%20or%20newer%20and%20deploy%20it%20across%20their%20environments.%22%20I%20would%20like%20to%20know%20what%20version%20do%20my%20customer%20have%20deployed.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2735620%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMDE%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2738657%22%20slang%3D%22en-US%22%3ERe%3A%20where%20can%20I%20see%20the%20%22detection%20build%20id%2Fnumber%22%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2738657%22%20slang%3D%22en-US%22%3EHi%2C%20it%20seems%20like%20security%20intelligence%20update.%20you%20can%20use%20Get-mpcomputerstatus%20poweshell%20command%20to%20get%20the%20details%20or%20can%20use%20the%20kql%20query%20to%20get%20the%20Defender%20definition%20update%20report.%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fwdsi%2Fdefenderupdates%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fwdsi%2Fdefenderupdates%3C%2FA%3E%3C%2FLINGO-BODY%3E
Contributor

Where can I see the "detection build id/number". For example, at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444 it says; "Enterprise customers who manage updates should select the detection build 1.349.22.0 or newer and deploy it across their environments." I would like to know what version do my customer have deployed.

1 Reply
best response confirmed by jjsantanna (Contributor)
Solution
Hi, it seems like security intelligence update. you can use Get-mpcomputerstatus poweshell command to get the details or can use the kql query to get the Defender definition update report.
https://www.microsoft.com/en-us/wdsi/defenderupdates