Skip to content

Commit ef269fc

Browse files
committed
MDE Videos
1 parent 99314c9 commit ef269fc

7 files changed

+33
-11
lines changed

defender-endpoint/data-collection-analyzer.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,19 +17,20 @@ ms.collection:
1717
ms.topic: conceptual
1818
ms.subservice: ngp
1919
search.appverid: met150
20-
ms.date: 03/26/2025
20+
ms.date: 04/01/2025
2121
---
2222

2323
# Data collection for advanced troubleshooting on Windows
2424

2525
**Applies to:**
2626
- [Microsoft Defender for Endpoint Plan 1](microsoft-defender-endpoint.md)
2727
- [Microsoft Defender for Endpoint Plan 2](microsoft-defender-endpoint.md)
28-
2928
- Microsoft Defender for Business
30-
3129
- Microsoft Defender Antivirus
3230

31+
> [!TIP]
32+
> Watch this video to learn more about onboarding issues: [Defender for Endpoint client analyzer onboarding issues](https://www.youtube.com/watch?v=HdhePgMBqs8)
33+
3334
When collaborating with Microsoft support professionals, you might be asked to use the client analyzer to collect data for troubleshooting of more complex scenarios. The analyzer script supports other parameters for that purpose and can collect a specific log set based on the observed symptoms that need to be investigated.
3435

3536
Run `MDEClientAnalyzer.cmd /?` to see the list of available parameters and their description:

defender-endpoint/overview-client-analyzer.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ ms.collection:
1717
ms.topic: conceptual
1818
ms.subservice: ngp
1919
search.appverid: met150
20-
ms.date: 03/12/2025
20+
ms.date: 04/01/2025
2121
---
2222

2323
# Troubleshoot sensor health using Microsoft Defender for Endpoint Client Analyzer
@@ -39,6 +39,9 @@ Besides obvious sensor health issues, MDECA can collect other traces, logs, and
3939
- [Run the client analyzer on Linux](run-analyzer-linux.md)
4040
- [Run the client analyzer on macOS](run-analyzer-macos.md)
4141

42+
> [!TIP]
43+
> Watch this video to get an overview of the client analyzer: [Defender for Endpoint client analyzer overview](https://www.youtube.com/watch?v=GnqDsvYYL6w)
44+
4245
## Privacy notice
4346

4447
- The Microsoft Defender for Endpoint Client Analyzer tool is regularly used by Microsoft Customer Support Services (CSS) to collect information that will help troubleshoot issues you may be experiencing with Microsoft Defender for Endpoint.

defender-endpoint/run-analyzer-linux.md

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ ms.service: defender-endpoint
99
ms.subservice: linux
1010
ms.localizationpriority: medium
1111
ms.topic: troubleshooting-general
12-
ms.date: 03/12/2025
12+
ms.date: 04/01/2025
1313
ms.custom: partner-contribution
1414
ms.collection:
1515
- m365-security
@@ -31,6 +31,8 @@ f1.keywords: NOCSH
3131
3232
If you have issues with Microsoft Defender for Endpoint on Linux and need support, you might be asked to provide the output from the Client Analyzer tool. This article explains how to use the tool on your device or with live response. You can use either a Python-based solution or a binary version that doesn't need Python.
3333

34+
> [!TIP]
35+
> Watch this video to get an overview of the client analyzer: [Defender for Endpoint client analyzer overview](https://www.youtube.com/watch?v=GnqDsvYYL6w)
3436
3537
## Running the binary version of the client analyzer
3638

@@ -126,6 +128,9 @@ If you have issues with Microsoft Defender for Endpoint on Linux and need suppor
126128
sudo ./mde_support_tool.sh -d
127129
```
128130
131+
> [!TIP]
132+
> Watch this video to learn more about onboarding issues: [Defender for Endpoint client analyzer onboarding issues](https://www.youtube.com/watch?v=HdhePgMBqs8)
133+
129134
## Command line options
130135
Below are the command line options provided by client analyzer
131136
@@ -525,7 +530,8 @@ The following script performs the first six steps of the [Running the Python ver
525530
./mde_support_tool.sh
526531
527532
```
528-
533+
> [!TIP]
534+
> Watch this video to learn more about endpoint settings: [Defender for Endpoint client analyzer endpoint settings](https://www.youtube.com/watch?v=Frw2xFjzphE)
529535
#### Run the client analyzer install scripts
530536
531537
1. Initiate a [Live Response session](live-response.md#initiate-a-live-response-session-on-a-device) on the machine you want to investigate.

defender-endpoint/run-analyzer-macos.md

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ ms.service: defender-endpoint
99
ms.subservice: macos
1010
ms.localizationpriority: medium
1111
ms.topic: troubleshooting-general
12-
ms.date: 01/08/2025
12+
ms.date: 04/01/2025
1313
ms.custom: partner-contribution
1414
ms.collection:
1515
- m365-security
@@ -27,6 +27,9 @@ If you're experiencing reliability or device health issues with Microsoft Defend
2727
1. Using a binary version (no external Python dependency)
2828
2. Using a Python-based solution
2929

30+
> [!TIP]
31+
> Watch this video to get an overview of the client analyzer: [Defender for Endpoint client analyzer overview](https://www.youtube.com/watch?v=GnqDsvYYL6w)
32+
3033
## Use the binary version of the client analyzer
3134

3235
1. Download the [XMDE Client Analyzer Binary](https://go.microsoft.com/fwlink/?linkid=2297517) tool to the macOS machine you need to investigate.
@@ -141,7 +144,10 @@ The tool currently requires Python version 3 or later to be installed on your de
141144
```bash
142145
sudo ./mde_support_tool.sh -d
143146
```
144-
147+
148+
> [!TIP]
149+
> Watch this video to learn more about onboarding issues: [Defender for Endpoint client analyzer onboarding issues](https://www.youtube.com/watch?v=HdhePgMBqs8)
150+
145151
## Command line options
146152
147153
### Primary command lines

defender-endpoint/run-analyzer-windows.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ ms.collection:
1717
ms.topic: conceptual
1818
ms.subservice: ngp
1919
search.appverid: met150
20-
ms.date: 03/12/2025
20+
ms.date: 04/01/2025
2121
---
2222

2323
# Run the client analyzer on Windows
@@ -26,6 +26,9 @@ ms.date: 03/12/2025
2626
- [Microsoft Defender for Endpoint Plan 1](microsoft-defender-endpoint.md)
2727
- [Microsoft Defender for Endpoint Plan 2](microsoft-defender-endpoint.md)
2828

29+
> [!TIP]
30+
> Watch this video to get an overview of the client analyzer: [Defender for Endpoint client analyzer overview](https://www.youtube.com/watch?v=GnqDsvYYL6w)
31+
2932
You have two options for running the Defender for Endpoint client analyzer on Windows:
3033

3134
- Use live response
@@ -66,6 +69,9 @@ In addition to the previous procedure, you can also [collect the analyzer suppor
6669
>
6770
> On Windows 8.1, Windows Server 2016 or any previous OS edition where Microsoft Monitoring Agent (MMA) is used for onboarding, the client analyzer script calls into an executable file called `MDEClientAnalyzerPreviousVersion.exe` to run connectivity tests for Command and Control (CnC) URLs while also calling into Microsoft Monitoring Agent connectivity tool `TestCloudConnection.exe` for Cyber Data channel URLs.
6871
72+
> [!TIP]
73+
> Watch this video to learn more about onboarding issues: [Defender for Endpoint client analyzer onboarding issues](https://www.youtube.com/watch?v=HdhePgMBqs8)
74+
6975
## Important points to keep in mind
7076

7177
All the PowerShell scripts and modules included with the analyzer are Microsoft-signed. If files were modified in any way, then the analyzer is expected to exit with the following error:

defender-endpoint/troubleshoot-performance-issues.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ ms.author: ewalsh
77
author: emmwalshh
88
ms.localizationpriority: medium
99
manager: deniseb
10-
ms.date: 01/31/2025
10+
ms.date: 04/01/2025
1111
audience: ITPro
1212
ms.topic: troubleshooting
1313
ms.subservice: ngp

defender-endpoint/troubleshoot-settings.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ manager: deniseb
77
ms.reviewer: yongrhee
88
ms.service: defender-endpoint
99
ms.topic: troubleshooting-general
10-
ms.date: 03/04/2025
10+
ms.date: 04/01/2025
1111
ms.subservice: ngp
1212
ms.localizationpriority: medium
1313
ms.collection: # Useful for querying on a set of strategic or high-priority content.

0 commit comments

Comments
 (0)