---
updatedAt: 2025-08-14T13:35:55.000Z
agentTools:
  siteIndex: https://developer.n-able.com/llms.txt
  projectIndex: https://developer.n-able.com/n-central/llms.txt
---

# Windows Defender Status

```powershell Automation Policy
<?xml version="1.0" encoding="utf-8" standalone="yes"?><Policy ID="6c12948e-10a7-4509-b8aa-ad8bf1ced92f" Name="Windows Defender Status" Description="VGhpcyBpcyBhIGN1c3RvbSBhbXAgdG8gbW9uaXRvciB0aGUgc3RhdHVzIG9mIFdpbmRvd3MgRGVmZW5kZXIgb24gYSBkZXZpY2Uu" Version="2.10.0.19" RemoteCategory="0" ExecutionType="Local" MinimumPSVersionRequired="0.0.0">
  <Object ID="{14bb438f-0d0d-48d7-9228-7ef4744f1b51}" Type="{B6FA6D8B-EEAA-47A6-8463-7F9A4F5BBB6E}" Data="&lt;xml&gt;&lt;OutputParameters&gt;&lt;Parameter ParameterName=&quot;oDefEnable&quot; Label=&quot;Is Windows Defender Enabled&quot; ParameterType=&quot;string&quot; Value=&quot;Run PowerShell Script.osDefEnable&quot; /&gt;&lt;Parameter ParameterName=&quot;oProdVer&quot; Label=&quot;Prodcut Version&quot; ParameterType=&quot;string&quot; Value=&quot;Run PowerShell Script.osProdVer&quot; /&gt;&lt;Parameter ParameterName=&quot;oSigVer&quot; Label=&quot;Signature Version&quot; ParameterType=&quot;string&quot; Value=&quot;Run PowerShell Script.osSigVer&quot; /&gt;&lt;Parameter ParameterName=&quot;oSigLastUpdate&quot; Label=&quot;Signature Last Updated&quot; ParameterType=&quot;string&quot; Value=&quot;Run PowerShell Script.osSigLastUpdate&quot; /&gt;&lt;Parameter ParameterName=&quot;oDefSigOutOfDate&quot; Label=&quot;Windows Defender Signature Out of Date&quot; ParameterType=&quot;string&quot; Value=&quot;Run PowerShell Script.osDefSigOutOfDate&quot; /&gt;&lt;Parameter ParameterName=&quot;oLastThreatDetected&quot; Label=&quot;Last Threat Detected&quot; ParameterType=&quot;string&quot; Value=&quot;Run PowerShell Script.osThreatName&quot; /&gt;&lt;Parameter ParameterName=&quot;oIsThreatActive&quot; Label=&quot;Is Threat Active&quot; ParameterType=&quot;string&quot; Value=&quot;Run PowerShell Script.osThreatActive&quot; /&gt;&lt;Parameter ParameterName=&quot;oLastThreatDet&quot; Label=&quot;When Was Last Threat Found&quot; ParameterType=&quot;string&quot; Value=&quot;Run PowerShell Script.osLatestDetectionTime&quot; /&gt;&lt;Parameter ParameterName=&quot;oRebootRequired&quot; Label=&quot;Reboot Required&quot; ParameterType=&quot;string&quot; Value=&quot;Run PowerShell Script.osRebootRequired&quot; /&gt;&lt;/OutputParameters&gt;&lt;/xml&gt;" />
  <LinkManager xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.datacontract.org/2004/07/PolicyExecutor">
    <hashset xmlns:d2p1="http://schemas.datacontract.org/2004/07/System">
      <d2p1:TupleOfstringstringstringstring>
        <d2p1:m_Item1>7f29ac48-04e5-4513-bc4b-3483320540d6.osProdVer</d2p1:m_Item1>
        <d2p1:m_Item2>OutputObject</d2p1:m_Item2>
        <d2p1:m_Item3></d2p1:m_Item3>
        <d2p1:m_Item4>oProdVer</d2p1:m_Item4>
      </d2p1:TupleOfstringstringstringstring>
      <d2p1:TupleOfstringstringstringstring>
        <d2p1:m_Item1>7f29ac48-04e5-4513-bc4b-3483320540d6.osSigVer</d2p1:m_Item1>
        <d2p1:m_Item2>OutputObject</d2p1:m_Item2>
        <d2p1:m_Item3></d2p1:m_Item3>
        <d2p1:m_Item4>oSigVer</d2p1:m_Item4>
      </d2p1:TupleOfstringstringstringstring>
      <d2p1:TupleOfstringstringstringstring>
        <d2p1:m_Item1>7f29ac48-04e5-4513-bc4b-3483320540d6.osDefEnable</d2p1:m_Item1>
        <d2p1:m_Item2>OutputObject</d2p1:m_Item2>
        <d2p1:m_Item3></d2p1:m_Item3>
        <d2p1:m_Item4>oDefEnable</d2p1:m_Item4>
      </d2p1:TupleOfstringstringstringstring>
      <d2p1:TupleOfstringstringstringstring>
        <d2p1:m_Item1>7f29ac48-04e5-4513-bc4b-3483320540d6.osThreatName</d2p1:m_Item1>
        <d2p1:m_Item2>OutputObject</d2p1:m_Item2>
        <d2p1:m_Item3></d2p1:m_Item3>
        <d2p1:m_Item4>oLastThreatDetected</d2p1:m_Item4>
      </d2p1:TupleOfstringstringstringstring>
      <d2p1:TupleOfstringstringstringstring>
        <d2p1:m_Item1>7f29ac48-04e5-4513-bc4b-3483320540d6.osThreatActive</d2p1:m_Item1>
        <d2p1:m_Item2>OutputObject</d2p1:m_Item2>
        <d2p1:m_Item3></d2p1:m_Item3>
        <d2p1:m_Item4>oIsThreatActive</d2p1:m_Item4>
      </d2p1:TupleOfstringstringstringstring>
      <d2p1:TupleOfstringstringstringstring>
        <d2p1:m_Item1>7f29ac48-04e5-4513-bc4b-3483320540d6.osRebootRequired</d2p1:m_Item1>
        <d2p1:m_Item2>OutputObject</d2p1:m_Item2>
        <d2p1:m_Item3></d2p1:m_Item3>
        <d2p1:m_Item4>oRebootRequired</d2p1:m_Item4>
      </d2p1:TupleOfstringstringstringstring>
      <d2p1:TupleOfstringstringstringstring>
        <d2p1:m_Item1>7f29ac48-04e5-4513-bc4b-3483320540d6.osDefSigOutOfDate</d2p1:m_Item1>
        <d2p1:m_Item2>OutputObject</d2p1:m_Item2>
        <d2p1:m_Item3></d2p1:m_Item3>
        <d2p1:m_Item4>oDefSigOutOfDate</d2p1:m_Item4>
      </d2p1:TupleOfstringstringstringstring>
      <d2p1:TupleOfstringstringstringstring>
        <d2p1:m_Item1>7f29ac48-04e5-4513-bc4b-3483320540d6.osSigLastUpdate</d2p1:m_Item1>
        <d2p1:m_Item2>OutputObject</d2p1:m_Item2>
        <d2p1:m_Item3></d2p1:m_Item3>
        <d2p1:m_Item4>oSigLastUpdate</d2p1:m_Item4>
      </d2p1:TupleOfstringstringstringstring>
      <d2p1:TupleOfstringstringstringstring>
        <d2p1:m_Item1>7f29ac48-04e5-4513-bc4b-3483320540d6.osLatestDetectionTime</d2p1:m_Item1>
        <d2p1:m_Item2>OutputObject</d2p1:m_Item2>
        <d2p1:m_Item3></d2p1:m_Item3>
        <d2p1:m_Item4>oLastThreatDet</d2p1:m_Item4>
      </d2p1:TupleOfstringstringstringstring>
    </hashset>
  </LinkManager>
  <Diagnostics OriginalVersion="2.91.0.4" />
  <Activity mc:Ignorable="sads sap" x:Class="Policy Builder" xmlns="http://schemas.microsoft.com/netfx/2009/xaml/activities" xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:mva="clr-namespace:Microsoft.VisualBasic.Activities;assembly=System.Activities" xmlns:p="clr-namespace:PolicyExecutor;assembly=PolicyExecutionEngine" xmlns:s="clr-namespace:System;assembly=mscorlib" xmlns:sads="http://schemas.microsoft.com/netfx/2010/xaml/activities/debugger" xmlns:sap="http://schemas.microsoft.com/netfx/2009/xaml/activities/presentation" xmlns:scg="clr-namespace:System.Collections.Generic;assembly=mscorlib" xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml">
    <x:Members>
      <x:Property Name="PolicyGUID" Type="InArgument(x:String)" />
    </x:Members>
    <sap:VirtualizedContainerService.HintSize>490,571</sap:VirtualizedContainerService.HintSize>
    <mva:VisualBasic.Settings>Assembly references and imported namespaces serialized as XML namespaces</mva:VisualBasic.Settings>
    <p:PolicySequence DisplayName="Policy Builder" sap:VirtualizedContainerService.HintSize="490,571" mva:VisualBasic.Settings="Assembly references and imported namespaces serialized as XML namespaces">
      <p:PolicySequence.Activities>
        <p:RunPowerShellScript AssemblyName="PolicyExecutionEngine, Version=2.91.0.4, Culture=neutral, PublicKeyToken=null" DisplayName="Run PowerShell Script" sap:VirtualizedContainerService.HintSize="454,348" Moniker="7f29ac48-04e5-4513-bc4b-3483320540d6" OutPut_64="[RunPowerShellScript_OutPut_64]" Result="[RunPowerShellScript_Result]" ResultString="[RunPowerShellScript_ResultString]" Results_x64="[RunPowerShellScript_Results_x64]" RunAsCurrentLoggedOnUser="False" ScriptExecutionMethod="ExecuteDebug" TypeName="RunPowerShellScript" genArgEvent="58ada268-6b40-4954-997b-f63d2812f2e9" m_bTextLinkChange="False" script="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">
          <p:RunPowerShellScript.InArgs>
            <scg:Dictionary x:TypeArguments="x:String, p:InArg" />
          </p:RunPowerShellScript.InArgs>
          <p:RunPowerShellScript.OutArgs>
            <p:OutArg x:Key="osProdVer" ArgType="string" DisplayName="osProdVer" Name="osProdVer">
              <p:OutArg.Arg>
                <OutArgument x:TypeArguments="x:String">[RunPowerShellScript_osProdVer]</OutArgument>
              </p:OutArg.Arg>
            </p:OutArg>
            <p:OutArg x:Key="osSigVer" ArgType="string" DisplayName="osSigVer" Name="osSigVer">
              <p:OutArg.Arg>
                <OutArgument x:TypeArguments="x:String">[RunPowerShellScript_osSigVer]</OutArgument>
              </p:OutArg.Arg>
            </p:OutArg>
            <p:OutArg x:Key="osSigLastUpdate" ArgType="string" DisplayName="osSigLastUpdate" Name="osSigLastUpdate">
              <p:OutArg.Arg>
                <OutArgument x:TypeArguments="x:String">[RunPowerShellScript_osSigLastUpdate]</OutArgument>
              </p:OutArg.Arg>
            </p:OutArg>
            <p:OutArg x:Key="osDefEnable" ArgType="string" DisplayName="osDefEnable" Name="osDefEnable">
              <p:OutArg.Arg>
                <OutArgument x:TypeArguments="x:String">[RunPowerShellScript_osDefEnable]</OutArgument>
              </p:OutArg.Arg>
            </p:OutArg>
            <p:OutArg x:Key="osThreatName" ArgType="string" DisplayName="osThreatName" Name="osThreatName">
              <p:OutArg.Arg>
                <OutArgument x:TypeArguments="x:String">[RunPowerShellScript_osThreatName]</OutArgument>
              </p:OutArg.Arg>
            </p:OutArg>
            <p:OutArg x:Key="osThreatActive" ArgType="string" DisplayName="osThreatActive" Name="osThreatActive">
              <p:OutArg.Arg>
                <OutArgument x:TypeArguments="x:String">[RunPowerShellScript_osThreatActive]</OutArgument>
              </p:OutArg.Arg>
            </p:OutArg>
            <p:OutArg x:Key="osLatestDetectionTime" ArgType="string" DisplayName="osLatestDetectionTime" Name="osLatestDetectionTime">
              <p:OutArg.Arg>
                <OutArgument x:TypeArguments="x:String">[RunPowerShellScript_osLatestDetectionTime]</OutArgument>
              </p:OutArg.Arg>
            </p:OutArg>
            <p:OutArg x:Key="osRebootRequired" ArgType="string" DisplayName="osRebootRequired" Name="osRebootRequired">
              <p:OutArg.Arg>
                <OutArgument x:TypeArguments="x:String">[RunPowerShellScript_osRebootRequired]</OutArgument>
              </p:OutArg.Arg>
            </p:OutArg>
            <p:OutArg x:Key="osDefSigOutOfDate" ArgType="string" DisplayName="osDefSigOutOfDate" Name="osDefSigOutOfDate">
              <p:OutArg.Arg>
                <OutArgument x:TypeArguments="x:String">[RunPowerShellScript_osDefSigOutOfDate]</OutArgument>
              </p:OutArg.Arg>
            </p:OutArg>
          </p:RunPowerShellScript.OutArgs>
        </p:RunPowerShellScript>
      </p:PolicySequence.Activities>
      <p:PolicySequence.Variables>
        <Variable x:TypeArguments="x:String" Name="RunPowerShellScript_OutPut_64" />
        <Variable x:TypeArguments="x:String" Name="RunPowerShellScript_ResultString" />
        <Variable x:TypeArguments="scg:IEnumerable(x:Object)" Name="RunPowerShellScript_Results_x64" />
        <Variable x:TypeArguments="x:Double" Name="RunPowerShellScript_Result" />
        <Variable x:TypeArguments="x:String" Name="RunPowerShellScript_osProdVer" />
        <Variable x:TypeArguments="x:String" Name="RunPowerShellScript_osSigVer" />
        <Variable x:TypeArguments="x:String" Name="RunPowerShellScript_osDefEnable" />
        <Variable x:TypeArguments="x:String" Name="RunPowerShellScript_osThreatName" />
        <Variable x:TypeArguments="x:String" Name="RunPowerShellScript_osThreatActive" />
        <Variable x:TypeArguments="x:String" Name="RunPowerShellScript_osRebootRequired" />
        <Variable x:TypeArguments="x:String" Name="RunPowerShellScript_osDefSigOutOfDate" />
        <Variable x:TypeArguments="x:String" Name="RunPowerShellScript_osSigLastUpdate" />
        <Variable x:TypeArguments="x:String" Name="RunPowerShellScript_osLatestDetectionTime" />
      </p:PolicySequence.Variables>
    </p:PolicySequence>
  </Activity>
</Policy>
```

```json Response Example
{"success":true}
```

# SCRIPT