Skip to content

Commit 06cd26f

Browse files
Merge pull request #3325 from YongRhee-MSFT/docs-editor/troubleshoot-asr-1743427400
Update troubleshoot-asr.md
2 parents c96aa09 + eff04d1 commit 06cd26f

File tree

1 file changed

+18
-1
lines changed

1 file changed

+18
-1
lines changed

defender-endpoint/troubleshoot-asr.md

Lines changed: 18 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.localizationpriority: medium
66
audience: ITPro
77
author: emmwalshh
88
ms.author: ewalsh
9-
ms.date: 03/11/2025
9+
ms.date: 04/01/2025
1010
ms.reviewer:
1111
manager: deniseb
1212
ms.custom: asr
@@ -136,6 +136,23 @@ Use the [Microsoft Security Intelligence web-based submission form](https://www.
136136

137137
When you report a problem with attack surface reduction rules, you're asked to collect and submit diagnostic data for Microsoft support and engineering teams to help troubleshoot issues.
138138

139+
### Using the MDE Client Analyzer
140+
141+
1. Download the [MDE Client Analyzer](/defender-endpoint/overview-client-analyzer).
142+
143+
2. Run the MDE Client Analyzer using [Live Response or locally](/defender-endpoint/run-analyzer-windows).
144+
145+
> [!TIP]
146+
> Ensure that log collection takes place during the reproduction attempt. Also, close any applications that aren't essential to reproducing the issue.
147+
148+
3. Run the MDE Client Analyzer with the `-v` switches:
149+
150+
```powershell
151+
C:\Work\tools\MDEClientAnalyzer\MDEClientAnalyzer.cmd -v
152+
```
153+
154+
### Manual process
155+
139156
1. Open Command Prompt as an administrator and open the Windows Defender directory:
140157

141158
```console

0 commit comments

Comments
 (0)