> For the complete documentation index, see [llms.txt](https://docs.cloudcyte.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cloudcyte.com/getting-started/configuring-modules/microsoft-windows-defender-health-analysis.md).

# Microsoft Windows Defender Health Analysis

The CyberCyte portal can analyse Windows Defender health state. For activating this module, please follow these steps below:

* Please navigate to "Rules & Policies" -> "Policy Management" -> Click on the "Microsoft Defender Health Analysis Policy" policy.
* Users can configure the policy with paremeters as company requirements. Also, users can assign the policy with default parameters.

| Parameters                               | Descriptions                                                           |
| ---------------------------------------- | ---------------------------------------------------------------------- |
| Assigned Groups                          | The groups for assigning the policy.                                   |
| Collection Interval                      | The interval for data collection.                                      |
| Enable Signature Update                  | The option for enabling the signature update.                          |
| Perform Quick Scan                       | The optiion for enabling quick scan.                                   |
| Quick Scan Interval (Hours)              | The interval for quick scanning.                                       |
| Perform Full Scan                        | The option for enabling full scan.                                     |
| Full Scan Interval (Hours)               | The interval for full scanning.                                        |
| Enable All Modules If Not Running        | The option for enabling all the modules if they are not running.       |
| Enable Mandatory Modules If Not Running  | The option for enabling the mandatory modules if they are not running. |
| Custom Command                           | The field for defining a custom command.                               |
| Initialization Script                    | The field for defining a initialization script.                        |
| Execute MDE Client Analyzer              | The option for executing the MDE client analyzer.                      |
| MDE Client analyzer Run Interval (Hours) | The run interval for MDE client analyzer.                              |
| Maintenance Intervals                    | The time intervals for maintenance.                                    |

* After assigning the policy, please navigate to "Threat Hunting" -> "Analysis & Investigation" -> "Microsoft Defender Analysis". The users can see the results on the grid and analyze.