Event Log report

[JoeQuick]

I would like to create some reports based on Windows Defender events.

Did a search and did find any reports.

Bascially I want to pull the scan event and/or if anything was found.
Separate reports are fine.

If someone can point me in the right direction or starting query example, I am more then glad to continue on myself to figure the rest out.

Thanks in advance.

[JoeQuick]

Ahhh, I got you.

As I am still evaluating, I do not have the option to Deploy.
Actions don't seem to work for me (I have a separate post for that issue).

Thanks for the link ict, very useful and informative.
Seems to be my best option while this is just a wish.

[ict-user · Accepted solution]

The problem in your situation is that Lansweeper only can read the standard Windows event logs.
Windows defender event logs are under Application and Services log.
Microsoft\Windows\Windows Defender\Operational

It is on the Lansweeper wishlist.

Maybe a Deployment or Action can do the job?

Using Powershell:
https://blogs.technet.microsoft.com/heyscriptingguy/2013/10/25/use-powershell-to-see-what-windows-defender-detected/

==================
Update:
Maybe you can create an 'On Event' Taskschedule that starts a EventCreate?
The EventCreate can write an custom event to the standard Windows Event logs.