Kindly Include information for defender:
a. sc query sense
b. sc query mssecwfp
c. sc query msseccore
d. sc query MsSecFlt
Registry exported
a. HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows Advanced Threat Protection
b. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IntuneManagementExtension\SideCar
c. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sense
d. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
e. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Policy Manager
f. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender
Powershell
Get-Service sense
IME version
(Get-Item "C:\Program Files (x86)\Microsoft Intune Management Extension\Microsoft.Management.Services.IntuneWindowsAgent.exe").VersionInfo.FileVersion
Event logs for sense to identify if its intune issue or defender issue
Also is it possible events logs can be saved as CSV.
Kindly Include information for defender:
a. sc query sense
b. sc query mssecwfp
c. sc query msseccore
d. sc query MsSecFlt
Registry exported
a. HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows Advanced Threat Protection
b. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\IntuneManagementExtension\SideCar
c. HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sense
d. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
e. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Policy Manager
f. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender
Powershell
Get-Service sense
IME version
(Get-Item "C:\Program Files (x86)\Microsoft Intune Management Extension\Microsoft.Management.Services.IntuneWindowsAgent.exe").VersionInfo.FileVersion
Event logs for sense to identify if its intune issue or defender issue
Also is it possible events logs can be saved as CSV.