MT.1158 - Scan should be scheduled
Overview
Checks that a scheduled scan day is configured in all assigned Microsoft Defender Antivirus policies.
An irregular scan schedule may miss persistent threats on managed devices, allowing malware to remain undetected for extended periods.
Remediation action:
- Open Microsoft Endpoint Manager > Endpoint Security > Antivirus
- Edit the relevant Microsoft Defender Antivirus policy
- Configure Schedule Scan Day to a specific day.
Related links
Test Metadata
| Field | Value |
|---|---|
| Test ID | MT.1158 |
| Severity | High |
| Suite | Maester |
| Category | Defender |
| PowerShell test | Test-MtMdeScheduleScanDay |
| Tags | Defender, Maester, MT.1158 |
Source
- Pester test:
tests/Maester/Defender/Test-MtMdeAntivirusPolicy.Tests.ps1 - PowerShell source:
powershell/public/maester/defender/Test-MtMdeScheduleScanDay.ps1