Microsoft Defender for Endpoint
Architecture and deploymentDeploy Manage Report Microsoft Defender Antivirus
In brief
The Microsoft Defender Antivirus reporting documentation now points to an updated Security auditing reference URL.
What Defender admins need to know
No administrator action is required.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
- Use the MSFT_MpComputerStatus class and the get method of associated classes in the Windows Defender WMIv2 Provider.
For reporting, Windows events comprise several security event sources, including Security Account Manager (SAM) events (enhanced for Windows 10). Also see Security auditingSecurity auditing and Windows Defender events.
See also
@@ -104,7 +104,7 @@ With Windows Management Instrumentation (WMI), you can manage Microsoft Defender - Use the [MSFT_MpComputerStatus](/previous-versions/windows/desktop/defender/msft-mpcomputerstatus) class and the get method of associated classes in the [Windows Defender WMIv2 Provider](/windows/win32/wmisdk/wmi-providers). -For reporting, Windows events comprise several security event sources, including Security Account Manager (SAM) events ([enhanced for Windows 10](/windows/whats-new/whats-new-windows-10-version-1507-and-1511)). Also see [Security auditing](/windows/security/threat-protection/auditing/security-auditing-overview) and [Windows Defender events](troubleshoot-microsoft-defender-antivirus.yml).+For reporting, Windows events comprise several security event sources, including Security Account Manager (SAM) events ([enhanced for Windows 10](/windows/whats-new/whats-new-windows-10-version-1507-and-1511)). Also see [Security auditing](/previous-versions/windows/it-pro/windows-10/security/threat-protection/auditing/security-auditing-overview) and [Windows Defender events](troubleshoot-microsoft-defender-antivirus.yml). ## See also