This workflow template enables the execution of a Quick or Full Antivirus Scan on devices using Microsoft Defender for Endpoint, based on the provided machineId or computerDnsName. It manages the process of initiating an antivirus scan, waits for a specified time to ensure action success, and subsequently gathers a history of previous scans. This workflow is crucial for maintaining endpoint security by automating the virus scan process, ensuring continuous monitoring and response, and reducing the manual effort required for Endpoint Detection and Response (EDR) operations.
Optional Triggers
"This workflows is intended to be used as a function."
Use Cases
Endpoint Detection and Response (EDR) ,Function
Workflow Breakdown
Takes as an input machineId or computerDnsName values.
Submits RunAntiVirusScan action to device by it's machineId.
Workflow will wait an specified period of time to verify the action is successful applied by Endpoint.
Collects a list of previous AntiVirus actions.
Vendors
Utils, Microsoft Defender for Endpoint
Workflow Output
Summary of status of the action.