The Microsoft Defender AV page provides a more detailed alert and deployment summary for devices running Microsoft Defender AV.
From the Microsoft Defender AV page, you can:
- Instantly view threats detected, active alerts, and devices having health issues.
- View a summary of all current alerts and navigate to the alert management.
- See a summary of the health of your devices.
- See the threats detected in the last 24 hours, 7 days, or 30 days
To View the Microsoft Defender AV Overview Page
- In Service Center, click Antivirus > Microsoft Defender AV.
Viewing the Microsoft Defender AV Overview Page for a Device
From the Microsoft Defender AV Overview page for a device, you can:
- View Protection Summary information, including the protection that is enabled, when the security intelligence was last updated, and when the last scan was performed.
- View Defender AV Policy Summary information, which indicates the Antivirus policy settings that are enabled.
You will see a message saying that no Microsoft Defender data has been collected for a device when:
- The device does not have Microsoft Defender AV installed or enabled
- The device does not have a Microsoft Defender AV policy applied
To view the Microsoft Defender AV overview page for a device
- In Service Center, click Status > Devices.
- Click the name of a device with Microsoft Defender.
- In the Summary area, click Microsoft Defender AV.
- Optionally, to see more details about alerts, click the Active Alerts box at the top of the page.
++++++++++++++++++++++++++++++++++++++++
The Microsoft Defender AV page provides a more detailed alert and deployment summary for devices running Microsoft Defender AV.
From the Microsoft Defender AV page, you can:
- Instantly view threats detected, active alerts, and devices having health issues.
- View a summary of all current alerts and navigate to the alert management.
- See a summary of the health of your devices.
- See the threats detected in the last 24 hours, 7 days, or 30 days
To View the Microsoft Defender AV Overview Page
- In Service Center, click Antivirus > Microsoft Defender AV.
Viewing the Microsoft Defender AV Overview Page for a Device
From the Microsoft Defender AV Overview page for a device, you can:
- View Protection Summary information, including the protection that is enabled, when the security intelligence was last updated, and when the last scan was performed.
- View Defender AV Policy Summary information, which indicates the Antivirus policy settings that are enabled.
You will see a message saying that no Microsoft Defender data has been collected for a device when:
- The device does not have Microsoft Defender AV installed or enabled
- The device does not have a Microsoft Defender AV policy applied
To view the Microsoft Defender AV overview page for a device
- In Service Center, click Status > Devices.
- Click the name of a device with Microsoft Defender.
- In the Summary area, click Microsoft Defender AV.
- Optionally, to see more details about alerts, click the Active Alerts box at the top of the page.
Viewing and Managing Threats, Alerts, and Health Issues with Microsoft Defender AV
Viewing Devices with Threats Detected by Microsoft Defender
The Threats Detected page shows a list of devices with detected threats.
- To view devices with threats detected by Microsoft Defender
- In Service Center, click Antivirus > Microsoft Defender AV.
- Do one of the following:
- Click the Threats Detected in the Last 24 Hours box.
- In the Status menu, on the right, click Threats.
- Optionally, to filter the list by alert category, select a category from the list.
Viewing Devices with Active Microsoft Defender Alerts
The Alerts page shows a list of devices with alerts from Microsoft Defender.
The table displays:
- The category of the alert
- The site the device belongs to
- The name of the device or website
- The time of the alert
- A link to the alert rule configuration
- A link to create a ticket
To view devices with active Microsoft Defender alerts
- In Service Center, click Antivirus > Microsoft Defender AV.
- Do one of the following:
- Click the Active Alerts box.
- In the Status menu, on the right, click Alerts.
To manage alerts detected by Microsoft Defender
- In Service Center, click Antivirus > Microsoft Defender AV.
- Do one of the following:
- Click the Active Alerts box.
- In the Status menu, on the right, click Alerts.
- Do any of the following:
- To view the site the device belongs to, click the link in the Site column.
- To view the device’s overview page, click the link in the Device/Website column.
- To view and potentially modify the alert configuration, click the link in the Alert Configuration column.
- To create a trouble ticket to take action on the alert, click the Create Ticket link.
- To clear an alert, select the check box beside the alert, and then click Clear. For more information about clearing alerts, see Clearing Alerts.
- To clear all alerts, click Clear All.
- To suppress an alert, select the check box beside the alert, and then click Suppress. For more information about alert suppression, see Suppressing Alerts.
- To export the alert list as a spreadsheet or document, click the Export button and select an option.
Viewing Devices with Microsoft Defender Health Issues
The Devices Having Health Issues page shows a list of devices with health issues detected by Microsoft Defender.
The table displays:
- The status of the device
- The site the device belongs to
- The device’s name or alias
- The policy the device belongs to
- A description of the device
To view devices with Microsoft Defender health issues
- In Service Center, click Antivirus > Microsoft Defender AV.
- Do one of the following:
- Click the Devices Having Health Issues box.
- In the Status menu, on the right, click Health.
- Optionally, do any of the following:
- Filter the list by selecting a health issue from the box.
- To go the site the device belongs to, click the link in the Site column.
- To go to the device’s overview page, click the link in the Device Name/Alias column.