You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/troubleshoot-asr.md
+18-1Lines changed: 18 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ ms.localizationpriority: medium
6
6
audience: ITPro
7
7
author: emmwalshh
8
8
ms.author: ewalsh
9
-
ms.date: 03/11/2025
9
+
ms.date: 04/01/2025
10
10
ms.reviewer:
11
11
manager: deniseb
12
12
ms.custom: asr
@@ -136,6 +136,23 @@ Use the [Microsoft Security Intelligence web-based submission form](https://www.
136
136
137
137
When you report a problem with attack surface reduction rules, you're asked to collect and submit diagnostic data for Microsoft support and engineering teams to help troubleshoot issues.
138
138
139
+
### Using the MDE Client Analyzer
140
+
141
+
1. Download the [MDE Client Analyzer](/defender-endpoint/overview-client-analyzer).
142
+
143
+
2. Run the MDE Client Analyzer using [Live Response or locally](/defender-endpoint/run-analyzer-windows).
144
+
145
+
> [!TIP]
146
+
> Ensure that log collection takes place during the reproduction attempt. Also, close any applications that aren't essential to reproducing the issue.
147
+
148
+
3. Run the MDE Client Analyzer with the `-v` switches:
0 commit comments