Unprotected Endpoint Discovery

Microsoft.WindowsDefender.UnprotectedServer.Discovery (Discovery)

Knowledge Base article:

Summary

Discovery for UnprotectedServer class

Element properties:

Target	Microsoft.Windows.Computer
Enabled	True
Frequency	14400
Remotable	False

Object Discovery Details:

Discovered Classes and their attribuets:
Microsoft.WindowsDefender.UnprotectedServer ServerId

Member Modules:

ID	Module Type	TypeId	RunAs
UnprotectedServerDS	DataSource	Microsoft.WindowsDefender.UnprotectedServer.DS	Default

Source Code:

<Discovery ID="Microsoft.WindowsDefender.UnprotectedServer.Discovery" Enabled="true" Target="Windows!Microsoft.Windows.Computer" ConfirmDelivery="true" Remotable="true" Priority="Normal">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="Microsoft.WindowsDefender.UnprotectedServer">

      <Property TypeID="Microsoft.WindowsDefender.UnprotectedServer" PropertyID="ServerId"/>

    </DiscoveryClass>

  </DiscoveryTypes>

  <DataSource ID="UnprotectedServerDS" TypeID="Microsoft.WindowsDefender.UnprotectedServer.DS">

    <Namespace>\\$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$\root\cimv2</Namespace>

    <IntervalSeconds>14400</IntervalSeconds>

  </DataSource>

</Discovery>