Microsoft Security Essentials and Defender

From Michael's Information Zone
Revision as of 13:15, 30 March 2018 by Michael.mast (talk | contribs)
Jump to navigation Jump to search

Text output for email reporting

wevtutil qe ForwardedEvents "/q:*[System[(EventID=1116)]]" /f:text /rd:true /c:1

Event IDs

[1]

  • 1116 : MALWAREPROTECTION_STATE_MALWARE_DETECTED
  • 1117 : MALWAREPROTECTION_STATE_MALWARE_ACTION_TAKEN
  • 1118 : MALWAREPROTECTION_STATE_MALWARE_ACTION_FAILED
  • 1119 : MALWAREPROTECTION_STATE_MALWARE_ACTION_CRITICALLY_FAILED
  • 5001 : MALWAREPROTECTION_RTP_DISABLED
  • https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus