2.3 - Design - Best practise for full scan, MDE from Zero to Hero
Welcome to Microsoft Defender for Endpoint from Zero to Hero, Module 2.3 - Design - Best practise for full scan
You might be wondering if scheduled full scans are needed, how much time it takes to complete, what is the CPU utilization, time difference when scanning file servers and database servers, how to get scan completion reports, etc
In this video, I cover all these topics.
In this video you will see the following:
1 - Scan types overview
2 - Is there any need for full scans?
3 - Full scan in numbers
4 - Custom exclusions and scans
5 - Demos: How to start or cancel scans (GUI, PowerShell & portal)
*Commands reference
-Starting a full scan
Start-MpScan -ScanType FullScan
-Canceling a scan
C:
Cd\program files\windows defender
.\mpcmdrun.exe –scan cancel
**COURSE OUTLINE**
I have plans to record 20+ videos and the course outline is not set in stone. Below are the modules already available and the ones on the horizon:
1. Product Overview - https://www.youtube.com/watch?v=Ul4Zx...
1.1 - Minimum requirements and licensing - • 1.1 Minimum requirements and licensing, MD...
2 - Design & key configuration
2.1 Design: MDE settings deployment - • 2.1 Design: MDE Settings Management, MDE f...
2.3 - Design - Best practise for full scan - • 2.3 - Design - Best practise for full scan...
2.10 Device tag overview - • 2.10 Device tag overview, MDE from Zero to...
2.11 Deploying device tag via portal, GPO and Intune - • 2.11 Deploying device tag via portal, GPO ...
2.12 - Device auto-tagging via Logic Apps - • 2.12 Device auto-tagging via Logic Apps, M...
3 - MDE deployment
3.1 - Initial setup and advanced settings - • 3.1 Initial setup and advanced settings, M...
3.2 - Deploying settings via MEM - • 3.2 Deploying AV settings via MEM, MDE fr...
3.3 - Deploying settings via GPO - • 3.3 Deploying AV settings via GPO, MDE fro...
4 - Onboarding
4.1 - Onboarding overview - • 4.1 Onboarding overview, MDE from Zero to ...
4.2 - Onboarding via GPO and local script - • 4.2 Onboarding via GPO and local script, M...
4.3 - Onboarding via Microsoft Endpoint Manager - • 4.3 Onboarding via MEM / Intune, MDE from ...
4.4 - Onboarding via helper script - • 4.4 Onboarding via helper script, MDE from...
4.5 - Auto Onboarding via Defender for Cloud
5 - Migration from 3rd party solution - • 5 .1 Migration from 3rd party solution, MD...
6 - Monitoring
6.1 - Alerts and incidents management - • 6.1 Alerts & incidents management, MDE fro...
6.2 - Ransomware attack investigation - • 6.2 Ransomware attack investigation, MDE f...
6.3 - Dealing with Ransomware via Sentinel automation - • 6.3 Dealing with Ransomware via Sentinel a...
7 - Integration with SIEM (Security Information and Event Management)
8 - Troubleshooting
8.1 - Troubleshooting mode deep dive - • 8.1 Troubleshooting mode deep dive, MDE fr...
8.2 - Troubleshooting PowerShell output issue - • 8.2 Troubleshooting PowerShell output issu...
My Microsoft Defender for Endpoint – From Zero to Hero playlist can be accessed from
• Introducing my Defender for Endpoint, from...
Please consider subscribing to my channel for the latest updates and upcoming modules.
Thanks for supporting this project, I hope you enjoy and learn a lot
Thanks for watching
Jackson Felden
#MicrosoftDefenderForEndpoint #MDE #CyberSecurity