How to check Microsoft defender Antivirus Signature version from Intune

Microsoft Defender for Endpoint is an enterprise level endpoint security solution which can prevent, detect, investigate and respond to advanced threats. Microsoft Defender Antivirus is one of the major component of this whole security platform.

Microsoft defender Anti-Virus or simply Defender Anti-virus is built into windows and works with Microsoft defender for Endpoint. It can be managed from Microsoft Endpoint Manager Admin Center.

There are many ways to check Defender Anti-virus signature version or security intelligence update build number. If you have only handful of devices then you can check Defender AV signature version manually via Windows security App or if you are managing all your organization devices using Intune, then you can also download a report from Microsoft endpoint manager admin center.

Check Defender Signature Version from Intune

Defender signature version can be checked from Microsoft Endpoint manager admin center. You can check it for one device or all your organizaton devices. The list of devices with Anti-virus signature version can be exported to a CSV file as well.

Defender AntiVirus Agent Status Report Intune
  • Click on Columns button and then Uncheck the columns which you do not need. For example: I have just selected two Columns from the list, Device state and Signature Version. Click on Generate report button to generate the report.
Generate Antivirus Agent report from Intune
  • You can always refresh the report by clicking on Generate again button and use a drop down filters to reduce the report to contain only relevant data as per your requirement. Apart from Signature version, you can also include Engine version, Last reported date, Last full scan date, Reboot required etc.
Signature Version column Intune Defender Antivirus Report

How to export Defender Antivirus report to a CSV file

To Export Defender Antivirus report with all the columns selected including Antivirus definitions / signature version. Please follow below steps:

  • Login on Microsoft Endpoint manager admin center.
  • Go to Reports –> Microsoft Defender Antivius.
  • Click on Columns button and select the one’s you need in your report.
  • Click on Generate report.
  • Click on Export and then click on Yes to export the export in a CSV file.

Exported report will be in a Zip file. Extract the content in a separate folder which will contain Defender Antivirus report in CSV format.

How to export Defender Antivirus report to a CSV file

How to check Defender Antivirus signature version manually on Windows 10/11

If you are not managing your organization devices using Intune then you can also check Microsoft defender Antivirus signature version manually. Lets check the steps for the same:

  • Login on Windows 10 or Windows 11 device.
  • Go to Start and search for Windows security.
  • Click on Settings at the bottom left corner of the window.
  • Click on About link.

After clicking on About link, you will find below information on the About page:

  • Antimalware Client Version
  • Engine Version
  • Antivirus Version
  • Antispyware Version
How to check Defender Antivirus signature version manually on Windows 10/11

How to check Defender Antivirus signature version using Powershell

You can also use Powershell console to check Defender Antivirus Signature version on Windows 10 or Windows 11 device.

  • Go to Start and search for Powershell.
  • Launch Powershell console.
  • Type below command and press Enter.
Get-mpcomputerstatus | fl *signatureversion*
How to check Defender Antivirus signature version using Powershell

Conclusion

In this blog post, we have seen how to download Defender Antivirus report from Intune which includes Antivirus signature version. You can tweak the report by adding / removing columns to only contains relevant data as per your requirement. You can check Defender version on a Windows 10 or Windows 11 device using Powershell or via Windows security app as well.