Skip to content

Commit 70ace4a

Browse files
authored
Update troubleshoot-collect-support-log.md
MpSupportFiles is captured anyway so removing that mention. Adding instead some instructions on how to capture other types of commonly required logs.
1 parent 928d621 commit 70ace4a

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

defender-endpoint/troubleshoot-collect-support-log.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,8 +34,10 @@ This article provides instructions on how to run the tool via Live Response on W
3434
1. Download and fetch the required scripts available from within the **Tools** subdirectory of the [Microsoft Defender for Endpoint Client Analyzer](https://aka.ms/BetaMDEAnalyzer).
3535

3636
For example, to get the basic sensor and device health logs, fetch `..\Tools\MDELiveAnalyzer.ps1`.
37-
38-
If you also require Microsoft Defender Antivirus support logs (`MpSupportFiles.cab`), then fetch `..\Tools\MDELiveAnalyzerAV.ps1`.
37+
- If you require additional logs related to Microsoft Defender Antivirus, then use `..\Tools\MDELiveAnalyzerAV.ps1`.
38+
- If you require [Microsoft Endpoint Data Loss Prevention](https://learn.microsoft.com/purview/endpoint-dlp-learn-about), then use `..\Tools\MDELiveAnalyzerDLP.ps1`.
39+
- If you require network and [Windows Filter Platform](https://learn.microsoft.com/windows-hardware/drivers/network/windows-filtering-platform-architecture-overview) related logs, then use `..\Tools\MDELiveAnalyzerNet.ps1`.
40+
- If you require [Process Monitor](https://learn.microsoft.com/sysinternals/downloads/procmon) logs, then use `..\Tools\MDELiveAnalyzerDLP.ps1`.
3941

4042
2. Initiate a [Live Response session](live-response.md#initiate-a-live-response-session-on-a-device) on the machine you need to investigate.
4143

0 commit comments

Comments
 (0)