Antivirus status is useful.
But on its own, it is not enough.
Support teams need to know whether Defender is working, whether signatures are stale, whether scans need attention, and whether detections are appearing across the fleet.
Cyber Detective Portal 2 now brings those Defender signals into the audit dashboard.
What the view includes
The Defender area shows recent detections from audit data, grouped so teams can scan quickly.
It also shows health information returned by Get-MpComputerStatus, including:
- real-time protection state
- tamper protection state
- signature age
- scan age
- reboot requirement
- engine version
This helps separate a clean endpoint from one that simply has not reported enough detail yet.
Why this matters at sea
Vessels often have limited connectivity and delayed audit returns.
That makes context important.
A single Defender alert is useful.
Knowing which vessel, which PC, which source path, whether protection is healthy, and when the system last audited is much better.
Bottom line
Cyber Detective Portal 2 now gives Defender detections and Defender health a proper fleet view.
That makes security follow-up faster and less dependent on digging through raw audit output.