README

Gets data about Microsoft Defender on the clients.

Module originally built by Matx (macvfx)

Table Schema

• cloud_automatic_sample_submission - boolean - If automatic sample submission is turned on
• cloud_diagnostic_enabled - boolean - If diagnostics are enabled
• cloud_enabled - boolean - If cloud is enabled
• definitions_updated - bigint - Timestamp of when definitions were last updated
• definitions_version - VARCHAR(255) - Anti-malware definitions version
• engine_version - VARCHAR(255) - Engine version
• licensed - boolean - Is product licensed
• log_level - VARCHAR(255) - Set logging level
• real_time_protection_available - boolean - Is real time protection available
• real_time_protection_enabled - boolean - Is real time protection enabled
• release_ring - VARCHAR(255) - Release ring currently in use
• erd_machine_id - VARCHAR(255) - Machine ID in ERD
• erd_early_preview_enabled - boolean - ERD early preview enabled
• healthy - boolean - If defender reports back healthy
• machine_guid - VARCHAR(255) - GUID of machine
• org_id - VARCHAR(255) - Organisation's ID
• real_time_protection_subsystem - VARCHAR(255) - What subsystem is used for real time protection
• cloud_auto_sample_submission_consent - VARCHR(255) - Consent of automatic sample submission
• app_version - VARCHAR(255) - Version of the app used