MSFT_MpComputerStatus class

This is the base status class for the user's PC.

The following syntax is simplified from Managed Object Format (MOF) code and includes all of the inherited properties.

Syntax

class MSFT_MpComputerStatus : BaseStatus
{
  string   ComputerID = msft_mpcomputerstatus.xml;
  uint32   ComputerState = 0;
  string   AMProductVersion = msft_mpcomputerstatus.xml;
  string   AMServiceVersion = msft_mpcomputerstatus.xml;
  string   AntispywareSignatureVersion = msft_mpcomputerstatus.xml;
  uint32   AntispywareSignatureAge = 0;
  DateTime AntispywareSignatureLastUpdated;
  string   AntivirusSignatureVersion = ed;
  uint32   AntivirusSignatureAge = 0;
  DateTime AntivirusSignatureLastUpdated;
  string   NISSignatureVersion = pdated;
  uint32   NISSignatureAge = 0;
  DateTime NISSignatureLastUpdated;
  DateTime FullScanStartTime;
  DateTime FullScanEndTime;
  uint32   FullScanAge = 0;
  uint8    LastFullScanSource = 0;
  uint8    RealTimeScanDirection = 0;
  DateTime QuickScanStartTime;
  DateTime QuickScanEndTime;
  uint32   QuickScanAge = 0;
  uint8    LastQuickScanSource = 0;
  string   AMEngineVersion = 0;
  boolean  AMServiceEnabled = false;
  boolean  OnAccessProtectionEnabled = false;
  boolean  IoavProtectionEnabled = false;
  boolean  BehaviorMonitorEnabled = false;
  boolean  AntivirusEnabled = false;
  boolean  AntispywareEnabled = false;
  boolean  RealTimeProtectionEnabled = false;
  string   NISEngineVersion = bled = false;
  boolean  NISEnabled = false;
};

Members

The MSFT_MpComputerStatus class has these types of members:

• Properties

Properties

The MSFT_MpComputerStatus class has these properties.

AMEngineVersion

Data type: string

Access type: Read-only

The AM Engine version (major, minor, build, revision)

AMProductVersion

Data type: string

Access type: Read-only

Product version (major, minor, build, revision)

AMServiceEnabled

Data type: boolean

Access type: Read-only

If the AM Engine is enabled

AMServiceVersion

Data type: string

Access type: Read-only

Service version (major, minor, build, revision)

AntispywareEnabled

Data type: boolean

Access type: Read-only

Specifies whether Antispyware protection is enabled

AntispywareSignatureAge

Data type: uint32

Access type: Read-only

Antispyware Signature age in days - if signatures have never been updated you will see an age of 65535 days

AntispywareSignatureLastUpdated

Data type: DateTime

Access type: Read-only

Antispyware Last updated local time. If this has never updated you will see a null value in this property

AntispywareSignatureVersion

Data type: string

Access type: Read-only

The Antispyware Signature version (major, minor, build, revision)

AntivirusEnabled

Data type: boolean

Access type: Read-only

Specifies whether Antivirus protection is enabled

AntivirusSignatureAge

Data type: uint32

Access type: Read-only

Antivirus Signature age in days- if signatures have never been updated you will see an age of 65535 days

AntivirusSignatureLastUpdated

Data type: DateTime

Access type: Read-only

Antivirus Last updated local time - If this has never updated you will see a null value in this property

AntivirusSignatureVersion

Data type: string

Access type: Read-only

The Antivirus Signature version (major, minor, build, revision)

BehaviorMonitorEnabled

Data type: boolean

Access type: Read-only

Specifies whether behavior monitoring is enabled

ComputerID

Data type: string

Access type: Read-only

Computer ID created by MAPS

ComputerState

Data type: uint32

Access type: Read-only

The current computer state

FullScanAge

Data type: uint32

Access type: Read-only

Last full scan age in days- if signatures have never been updated you will see an age of 65535 days

FullScanEndTime

Data type: DateTime

Access type: Read-only

Time of last Full Scan end - If this has never updated you will see a null value in this property

FullScanStartTime

Data type: DateTime

Access type: Read-only

Time of last Full Scan start - If this has never updated you will see a null value in this property

IoavProtectionEnabled

Data type: boolean

Access type: Read-only

Scan all downloaded files and attachments

LastFullScanSource

Data type: uint8

Access type: Read-only

Last scan source

Unknown (0)

User (1)

System (2)

Real-time (3)

IOAV (4)

LastQuickScanSource

Data type: uint8

Access type: Read-only

Last scan source

Unknown (0)

User (1)

System (2)

Real-time (3)

IOAV (4)

NISEnabled

Data type: boolean

Access type: Read-only

If the NRI Engine is enabled

NISEngineVersion

Data type: string

Access type: Read-only

NRI Engine version (major, minor, build, revision)

NISSignatureAge

Data type: uint32

Access type: Read-only

NRI Signature age in days- if signatures have never been updated you will see an age of 65535 days

NISSignatureLastUpdated

Data type: DateTime

Access type: Read-only

NRI Last updated local time - If this has never updated you will see a null value in this property

NISSignatureVersion

Data type: string

Access type: Read-only

The NRI Signature version (major, minor, build, revision)

OnAccessProtectionEnabled

Data type: boolean

Access type: Read-only

Specifies whether the computer is monitoring file and program activity on your computer

QuickScanAge

Data type: uint32

Access type: Read-only

Last quick scan age in days- if signatures have never been updated you will see an age of 65535 days.

QuickScanEndTime

Data type: DateTime

Access type: Read-only

Time of last Quick Scan end - If this has never updated you will see a null value in this property

QuickScanStartTime

Data type: DateTime

Access type: Read-only

Time of last Quick Scan start - If this has never updated you will see a null value in this property

RealTimeProtectionEnabled

Data type: boolean

Access type: Read-only

Specifies whether real-time protection is enabled

RealTimeScanDirection

Data type: uint8

Access type: Read-only

Real-time scan direction enumeration

Both (0)

Incoming (1)

Outcoming (2)

Requirements

Minimum supported client	Windows 8.1 [desktop apps only]
Minimum supported server	Windows Server 2012 R2 [desktop apps only]
Namespace	Root\Microsoft\Windows\Defender
MOF	ProtectionManagement.mof
DLL	ProtectionManagement.dll