Skip to content

Commit 9225eee

Browse files
committed
Learn Editor: Update troubleshoot-asr.md
1 parent 89feac4 commit 9225eee

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

defender-endpoint/troubleshoot-asr.md

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -136,6 +136,22 @@ Use the [Microsoft Security Intelligence web-based submission form](https://www.
136136

137137
When you report a problem with attack surface reduction rules, you're asked to collect and submit diagnostic data for Microsoft support and engineering teams to help troubleshoot issues.
138138

139+
### Using the MDE Client Analyzer
140+
141+
1. Download the [MDE Client Analyzer](/defender-endpoint/overview-client-analyzer).
142+
143+
2. Run the MDE Client Analyzer using [Live Response or locally](/defender-endpoint/run-analyzer-windows).
144+
145+
> [!TIP]
146+
> Before starting the trace, please make sure that the issue is reproducible. Additionally, close any applications that do not contribute to the reproduction of the issue.
147+
148+
3. Run the MDE Client Analyzer with the `-v` switches:
149+
150+
```powershell
151+
C:\Work\tools\MDEClientAnalyzer\MDEClientAnalyzer.cmd -v
152+
```
153+
154+
### Manual process
139155
1. Open Command Prompt as an administrator and open the Windows Defender directory:
140156

141157
```console

0 commit comments

Comments
 (0)