Get-Service WinDefend, WdNisSvc, Sense | Format-Table Name, Status, StartType
Get-Process MsMpEng -ErrorAction SilentlyContinue
Get-MpComputerStatus | Select AMServiceEnabled, AntivirusEnabled, RealTimeProtectionEnabled, IsTamperProtected
Get-Service WinDefend
sc.exe qc WdFilter
sc.exe qc WdBoot
sc.exe query WdNisDrv
driverquery | findstr /i "WdFilter WdBoot WdNis"
fltmc
$defenderTasks = @(Get-ScheduledTask -TaskPath '\Microsoft\Windows\Windows Defender\' -ErrorAction SilentlyContinue)
if ($defenderTasks.Count -eq 0) { 'No tasks returned under \Microsoft\Windows\Windows Defender\' }
$defenderTasks | ForEach-Object { '{0} = {1}' -f $_.TaskName, $_.State }