Exploring MDAV interfaces
In the next two sub-sections, you will find out about the two primary ways of interfacing with MDAV locally on a device: Windows Security and PowerShell. While not used for at-scale configuration, familiarity with these interfaces is important for troubleshooting, testing, and small-scale deployments. We start with the Windows Security app.
Windows Security
MDAV does not have a dedicated, standalone GUI like many third-party security tools. Instead, it surfaces itself in the Windows Security app, which can also be found in the operating system’s (OS) settings, and leverages the Windows Security Service (SecurityHealthService.exe). The app also includes settings beyond the scope of MDAV. For example, it includes options for Windows Hello authentication. From Windows 10 1709 onwards, it will also show the status of third-party services you may have replaced MDAV with. This is powered by the Windows Security Center Service (WSCSVC), which has APIs...
