Defender Antivirus Events Report

This guide will show an administrator how to access the detected malware report which will provide information about the malware identified by Defender for Intune joined devices.

Role Requirements

Procedure Scope: Administrators

Required Group Membership: Admin.Security

Handbook Reference

Package: TBD

Domain: TBD

Modifies: TBD

Defender Antivirus Events Report

1. Navigate to the Antivirus Detected Malware Report – Intune portal, locate and select the Generate Report action. The generated report will provide the malware state of your organization's devices. Administrators can find information about the date the malware was detected, the associated device name and severity, and other malware related details. If you are looking for a specific event, you can utilize the provided filters as desired to return the results you need.
   

Need Assistance?