Kaffeeundcode
Script Library
PowerShell 01.06.2026

Script Workspace

Get DefenderStatus

Review the purpose, inspect the code, then test it safely in your own tenant.

63_Get-DefenderStatus.ps1

<#
.SYNOPSIS
    Prüft den Defender-Status.
    
.DESCRIPTION
    Liest aus, ob der Echtzeitschutz aktiv ist und wann der letzte Scan war.
    Erfordert die Berechtigung 'DeviceManagementManagedDevices.Read.All'.

.NOTES
    File Name: 63_Get-DefenderStatus.ps1
    Author: Mattia Cirillo
    Version: 1.0
#>

param (
    [string]$DeviceName
)

Connect-MgGraph -Scopes "DeviceManagementManagedDevices.Read.All"

$Device = Get-MgDeviceManagementManagedDevice -Filter "deviceName eq '$DeviceName'"
# Note: Granular Defender status often requires MDE (Defender for Endpoint) API or interpreting config states.
# Basic Intune object has properties: valid, clean etc.
if ($Device) {
    Write-Host "Device Health Status: $($Device.DeviceHealthAttestationState)"
}