The "Run Antivirus Scan on a device on Microsoft Defender for Endpoint" workflow template is designed to enhance endpoint security by automating antivirus scans. It allows users to initiate a quick or full antivirus scan on a device using either its machine ID or DNS name. The workflow submits the scan request, waits for confirmation of successful execution, and retrieves a history of previous antivirus actions. This template is ideal for organizations looking to streamline their endpoint detection and response (EDR) processes.
Optional Triggers
["This workflow is intended to be used as a function."]
Use Cases
Endpoint Detection and Response (EDR) , Function
Workflow Breakdown
Takes as an input machineId or computerDnsName values.
Submits RunAntiVirusScan action to device by it's machineId.
Workflow will wait an specified period of time to verify the action is successful applied by Endpoint.
Collects a list of previous AntiVirus actions.
Vendors
Utils, Microsoft Defender for Endpoint
Workflow Output
Summary of status of the action.