You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/command-line-arguments-microsoft-defender-antivirus.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -52,9 +52,9 @@ In our example, the MpCmdRun utility starts a full antivirus scan on the device.
52
52
53
53
|Command|Description|
54
54
|---|---|
55
-
|`-?`**or**`-h`|Displays all available options for the MpCmdRun tool|
55
+
|`-?`**or**`-h`|Displays all available options for the MpCmdRun tool.|
56
56
|`-Scan [-ScanType [<value>]] [-File <path> [-DisableRemediation] [-BootSectorScan] [-CpuThrottling]] [-Timeout <days>] [-Cancel]`|Scans for malicious software. Values for **ScanType** are:<p>**0** Default, according to your configuration<p>**1** Quick scan<p>**2** Full scan<p>**3** File and directory custom scan.<p>CpuThrottling runs according to policy configurations.|
|`-CaptureNetworkTrace -Path <path>`|Captures all the network input into the Network Protection service and saves it to a file at `<path>`. <br/>Supply an empty path to stop tracing.|
59
59
|`-GetFiles [-SupportLogLocation <path>]`|Collects support information. See [collecting diagnostic data](collect-diagnostic-data.md).|
60
60
|`-GetFilesDiagTrack`|Same as `-GetFiles`, but outputs to temporary DiagTrack folder.|
@@ -73,13 +73,13 @@ In our example, the MpCmdRun utility starts a full antivirus scan on the device.
73
73
|`-TrustCheck -File <FilePath>`|Checks trust status of a file.|
74
74
|`-ValidateMapsConnection`|Verifies that your network can communicate with the Microsoft Defender Antivirus cloud service. This command will only work on Windows 10, version 1703 or higher.|
75
75
|`-ListCustomASR`|List the custom Azure Site Recovery rules present on this device.|
76
-
|`-DisplayECSConnection`|displays URLs that Defender Core service uses to establish connection to ECS.|
76
+
|`-DisplayECSConnection`|Displays URLs that Defender Core service uses to establish connection to ECS.|
77
77
|`-HeapSnapshotConfig <-Enable|-Disable> [-Pid <ProcessID>]`|Enable or Disable heap snapshot (tracing) configuration for process. Replace `<ProcessID>` with the actual process ID.|
78
78
|`-ResetPlatform`| Reset platform binaries back to `%ProgramFiles%\Windows Defender`.|
79
79
|`-RevertPlatform`| Revert platform binaries back to the previously installed version of the Defender platform.|
80
80
81
81
> [!NOTE]
82
-
> For the "Scan" command, the following are the default time out values for Quick or Full scans where the scan will stop at that time by default.
82
+
> For the `Scan` command, the following are the default time out values for Quick or Full scans where the scan will stop at that time by default.
83
83
- Scheduled Full Scans or MpCmdRun -scan: Seven day limit
84
84
- Scheduled Quick Scans or MpCmdRun -scan: One day limit
0 commit comments