Windows 10: How Can Defender Receive a Trigger a to Start AV Scan and Auto Investigation from Tanium?

We get a TAXII feed into our Tanium instance and it reports what assets are hitting the IoCs. I'd like to trigger Defender scans via API/script/etc for those assets.

:)

 

defender scans

Hi Ian,

Thanks for posting your query on Microsoft Community.

This issue might occur if you have set any task scheduler for Windows Defender.

I suggest you to delete the task for Windows defender and check if it helps.

Follow the below steps:

• 
  Search and open Schedule tasks.
  
• 
  In the left-hand menu, open the Task Scheduler Library, then select
  Microsoft >Windows >Windows Defender.
  
• 
  Double-click Windows Defender Scheduled Scan.
  
• 
  Select the Triggers panel, then select Delete.
  

Hope it helps, reply to us with the status of your issue. We will be happy to assist you.

 

Windows defender crash during scan

might be malware! i had similar issue with defender and other Av..its bad ass malware..
use anykind of av rescue disk and scan with that!!!

 

How do I set Windows Defender to a custom auto scan

Below are instructions I found yet when I open the Task Scheduler Library, there is no Microsoft to select. (In Control Panel, maintenance is set to auto scan so that doesn't need changing.)

Schedule a scan in Windows Defender

Applies to Windows 10

Windows Defender regularly scans your PC to help keep it safe. To choose when and how often you want to scan your PC, use the Task Scheduler.

• 
  Search and open Schedule tasks.
  
• 
  In the left-hand menu, open the Task Scheduler Library, then select
  Microsoft > Windows > Windows Defender.
  
• 
  Double-click Windows Defender Scheduled Scan.
  
• 
  Select the Triggers panel and then select New.
  
• 
  Now choose when you want to scan and how frequently. Select OK to add the trigger.
  

[Moved from Windows]