Skip to main content

Managed AV - Scans

Tyler
  • Updated

Team: Huntress Managed Endpoint Detection and Response (EDR)
Product: Managed Windows Defender
Environment: Managed Microsoft Windows Defender
Summary: Huntress MAV allows you to run manual (full or quick) scans, or schedule daily quick scans for specific agents or organizations. 

 

In this KB:

Running a Manual Scan

Scheduled Scans for one agent

Scheduled Scans for an entire organization

 

 

Running a Manual Scan

  1. Click EDR on the left
  2. Click Managed Antivirus 
  3. In the bottom card titled "Managed Antivirus Status" click the checkbox for all agent(s) you wish to scan
  4. Click MAV Actions and then select Quick Scan. Note: Full Scan can take several days to complete and consume a large number of resources, so use caution!
  5. This will send a command to the Huntress agent to request that Windows Defender runs a scan. If the machine is under load Windows may pause the scan, which can extend the time the scan takes and/or make Defender appear to be ignoring the scan request.

Managed Antivirus landing page using Huntress "new look". The sequence is the same for accounts using the classic view.


 

 

Scheduling Scans

Huntress MAV gives the option to schedule quick scans in daily increments. 

For information on scheduling full scans, please see Managed AV - Full Scans

 

Scheduling quick scans for a single agent

Following the same steps above, you can also schedule a scan to be run on a single agent daily.

Once on the antivirus page for the specified agent, you’ll click on ‘Policy Status’ , then 'Configure'.

mceclip4.png

After clicking configure, you’ll then click ‘Scans’. 

mceclip3.png

In the ‘Scans’ menu, you can then configure a specific time you’d like it to run on a daily basis. You can also set up "Catch-up scans" in case a daily scan is missed. 

 

Scheduling quick scans for an entire organization

You can schedule scans for an entire organization by going to the Managed Antivirus (MAV) landing page (click EDR on the far left).

Once in that tab, simply click the Defender Configuration (new look) or Configure (classic view) button and then choose scans.

Example of Huntress "new look":

Example of Huntress classic view:

Related articles