Skip to content

Commit 600e44e

Browse files
committed
Learn Editor: Update command-line-arguments-microsoft-defender-antivirus.md
1 parent 2cf6d7c commit 600e44e

File tree

1 file changed

+10
-2
lines changed

1 file changed

+10
-2
lines changed

defender-endpoint/command-line-arguments-microsoft-defender-antivirus.md

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -61,13 +61,21 @@ In our example, the MpCmdRun utility starts a full antivirus scan on the device.
6161
|`-RemoveDefinitions [-All]`|Restores the installed security intelligence to a previous backup copy or to the original default set.|
6262
|`-RemoveDefinitions [-DynamicSignatures]`|Removes only the dynamically downloaded security intelligence.|
6363
|`-RemoveDefinitions [-Engine]`|Restores the previous installed engine.|
64-
|`-SignatureUpdate [-UNC \|-MMPC]`|Checks for new security intelligence updates.|
65-
|`-Restore [-ListAll \|[[-Name <name>] [-All] \|[-FilePath <filePath>]] [-Path <path>]]`|Restores or lists quarantined item(s).|
64+
|`-SignatureUpdate [-UNC |-MMPC]`|Checks for new security intelligence updates.|
65+
|`-Restore [-ListAll |[[-Name <name>] [-All] |[-FilePath <filePath>]] [-Path <path>]]`|Restores or lists quarantined item(s).|
6666
|`-AddDynamicSignature [-Path]`|Loads dynamic security intelligence.|
6767
|`-ListAllDynamicSignatures`|Lists the loaded dynamic security intelligence.|
6868
|`-RemoveDynamicSignature [-SignatureSetID]`|Removes dynamic security intelligence.|
6969
|`-CheckExclusion -path <path>`|Checks whether a path is excluded.|
70+
|`-TDT [-on|-off|-default]`|Disable or Enable TDT feature or sets it to default. If no option is specified, it will retrieve the current status.|
71+
|`-OSCA`|Prints OS Copy Acceleration feature status.|
72+
|`-DeviceControl -TestPolicyXml <FilePath> [-Rules | -Groups]`|Validate xml policy groups and rules.|
73+
|`-TrustCheck -File <FilePath>`|Checks trust status of a file.|
7074
|`-ValidateMapsConnection`|Verifies that your network can communicate with the Microsoft Defender Antivirus cloud service. This command will only work on Windows 10, version 1703 or higher.|
75+
|`-ListCustomASR`|List the custom ASR rules present on this device.|
76+
|`-DisplayECSConnection`|displays URLs that Defender Core service will use to establish connection to ECS.|
77+
|`-HeapSnapshotConfig <-Enable|-Disable> [-Pid <ProcessID>]`|Enable or Disable heap snapshot (tracing) configuration for process.<p><ProcessID> values<p>**0** (Default) 'MsMpEng.exe', currently running on system.<p>**1** 'MpDefenderCoreService.exe', currently running on system.<p>**2** 'NisSrv.exe', currently running on system.|
78+
|<p>3 'MpDlpService.exe', currently running on system.<p><other> Apply command to a running process ID.||
7179
|`-ResetPlatform`| Reset platform binaries back to `%ProgramFiles%\Windows Defender`.|
7280
|`-RevertPlatform`| Revert platform binaries back to the previously installed version of the Defender platform.|
7381

0 commit comments

Comments
 (0)