"Manage Microsoft Defender for Endpoint with PowerShell"

Verify configuration are aligning with recommended settings when performing an evaluation of Microsoft Defender Antivirus and Microsoft Defender for Endpoint. After installation use the Get-DefenderEvaluationReport command to run a report.

PowerShell module for Microsoft Defender for Endpoint (MDE).

The unofficial API cmdlet to interact with the Microsoft Defender XDR portal

Implements the defender API

PowerShell module to validate Microsoft Defender for Endpoint (MDE) configurations and security settings.

GUI-based endpoint troubleshooting toolkit for Microsoft Defender for Endpoint, Intune, enrollment, firewall, proxy and Windows endpoint diagnostics. Includes a health rule engine, PRT and MDM certificate checks, a compliance-relevant Device Health panel, MAPS/connectivity validation, enrollment error decoding, JSON export and a headless mode.

Microsoft Defender Device Control for unmanaged Windows 11 devices - no Intune, no domain GPO, no MDM. Apply, audit, and verify the canonical Local GPO Device Control registry surface from a single PowerShell cmdlet.

Microsoft Defender for Endpoint troubleshooting: prove a file sharing-violation collision between the EDR sensor (MsSense.exe) and a line-of-business app, for a Defender for Endpoint EDR exclusion request. Crash/hang event harvest, Process Monitor filter files written natively, capture, automated collision analysis, and a JSON hand-back. Windows Po... More info