Kaffeeundcode
Script Library
PowerShell 01.06.2026

Script Workspace

FullScan Defender

Review the purpose, inspect the code, then test it safely in your own tenant.

66_FullScan-Defender.ps1

<#
.SYNOPSIS
    Startet einen Defender Full Scan.
    
.DESCRIPTION
    Remote Action für einen vollständigen Systemscan.
    Erfordert die Berechtigung 'DeviceManagementManagedDevices.ReadWrite.All'.

.NOTES
    File Name: 66_FullScan-Defender.ps1
    Author: Mattia Cirillo
    Version: 1.0
#>

param (
    [string]$DeviceName
)

Connect-MgGraph -Scopes "DeviceManagementManagedDevices.ReadWrite.All"

$Device = Get-MgDeviceManagementManagedDevice -Filter "deviceName eq '$DeviceName'"
if ($Device) {
    Invoke-MgWindowsDefenderScanDeviceManagementManagedDevice -ManagedDeviceId $Device.Id -QuickScan $false
    Write-Host "Full Scan gestartet." -ForegroundColor Green
}