Defender

This reference provides functions descriptions and syntax for all Defender-specific functions. It lists the functions in alphabetical order based on the verb at the beginning of the functions.

Note

You might also hear these functions being referred to as cmdlets. They were designed to appear like cmdlets, even though they were developed as PowerShell functions.

Defender

Add-MpPreference	Adds values to multi-valued properties (for example, exclusions and protected folders) in Windows Defender. Note You need to run this cmdlet in an elevated PowerShell window (a PowerShell window you opened by selecting Run as administrator).
Get-MpComputerStatus	Gets the status of antimalware software on the computer.
Get-MpPreference	Returns settings and configuration for Windows Defender.
Get-MpThreat	Gets the history of threats detected on the computer.
Get-MpThreatCatalog	Gets known threats from the definitions catalog.
Get-MpThreatDetection	Gets active and past malware threats that Windows Defender detected.
Remove-MpPreference	Removes values from multi-valued properties (for example, exclusions and protected folders) and returns settings in Windows Defender to their default values. Note You need to run this cmdlet in an elevated PowerShell window (a PowerShell window you opened by selecting Run as administrator).
Remove-MpThreat	Removes active threats from a computer.
Set-MpPreference	Configures settings for Windows Defender. Note You need to run this cmdlet in an elevated PowerShell window (a PowerShell window you opened by selecting Run as administrator).
Start-MpScan	Starts a scan on a computer.
Start-MpWDOScan	Starts a Windows Defender offline scan.
Update-MpSignature	Updates the antimalware definitions on a computer.