Changes for page Microsoft Defender

Summary

• Page properties (1 modified, 0 added, 0 removed)

Details

Page properties

Content

...	...	@@ -8,19 +8,44 @@
8	8
9	9	{{content/}}
10	10
11		-{{figure image="en_ms_defender_plugin.png" width="600"}}
12		-The path for the //Malware Protection Command Line Utility// of //Microsoft Defender// must be configured.
13		-{{/figure}}
	11	+With the free Microsoft Defender plugin for {{formcycle/}} it is possible to scan uploaded files for viruses. For this purpose the plugin uses the //Malware Protection Command Line Utility// provided by Microsoft Defender.
14	14
15		-With this plugin it is possible to scan uploaded elements in the backend as well as in delivered forms for viruses with the help of //Microsoft Defender//. In order for this to work, this plugin has to be installed as a system plugin and has to be activated and the {{formcycle/}} Server must be running on a //Windows Server// operating system with //Microsoft Defender// enabled. Operating systems other than //Windows Server// are not officially supported by the plugin.
	13	+== Functionality ==
16	16
17		-After installing the plugin, it is necessary to configure the file path to the //Malware Protection Command Line Utility// of //Microsoft Defender//.
	15	+; Instant virus scan
	16	+: Each file is scanned immediately after it is uploaded.
18	18
	18	+In {{formcycle/}} it is possible to upload files e.g. in the form through an upload element or in the backend of {{formcycle/}}. Through this plugin the //Malware Protection Command Line Utility// of Microsoft Defender is addressed and a virus scan is performed on the uploaded file. If, according to Microsoft Defender, the file is a virus, an error message is displayed and an entry is added to the process log.
	19	+
	20	+== Installation ==
	21	+
	22	+To ensure that the plugin is also available in all clients and forms, it is recommended to install it as a system plugin, which allows for better central administration and configuration.
	23	+
19	19	== Configuration ==
20	20
21	21	The following configuration parameters exist:
22	22
23	23	; MpCmdRun-path (Required).
24		-: File path to //MpCmdRun.exe// or //Malware Protection Command Line Utility// from //Microsoft Defender//. Through it, a scan can take place in the file system through the command line. Usually, the file path to this file may look like this: //C:\Program Files\Windows Defender\MpCmdRun.exe// oder //C:\ProgramData\Microsoft\Windows Defender\Platform\<select last version>\MpCmdRun.exe//. If no file path is specified, an attempt is made to generate a file path to MpCmdRun.exe, which is specified in the plugin description.
	29	+: File path to MpCmdRun.exe or //Malware Protection Command Line Utility// from //Microsoft Defender//. Through it, a scan can take place in the file system through the command line. If this configuration is not done, an attempt is made to generate a possible file path, which is then specified in the plugin description. However, it is recommended to specify the path to MpCmdRun.exe or //Malware Protection Command Line Utility// itself. Possible file paths could be: //C:\Program Files\Windows Defender\MpCmdRun.exe// or //C:\ProgramData\Microsoft\Windows Defender\Platform\<select last version>\MpCmdRun.exe//
25	25	; scan-timeout (Required)
26		-: Time in seconds until the scan process terminates. After the timeout, the file is treated like a file where a virus was found. The default value is 45 seconds.
	31	+: Allows to define the time in seconds before the scan process is stopped. After the timeout, the file will be treated as a file where a virus was found. The default value is 45 seconds.
	32	+
	33	+== Example configuration ==
	34	+
	35	+Example configuration of the plugin:
	36	+
	37	+{{lightbox image="en_ms_defender_plugin.png"/}}
	38	+
	39	+== Usage ==
	40	+
	41	+=== Test file ===
	42	+
	43	+A common method to check virus scanners is the //eicar.com// file.
	44	+For example, in the backend of {{formcycle/}} this test file can be uploaded and after successful configuration an error message can be seen.
	45	+
	46	+; [[**Wikipedia**>>https://de.wikipedia.org/wiki/EICAR-Testdatei]]
	47	+; [[**Download**>>https://www.eicar.org/download-anti-malware-testfile/]]
	48	+
	49	+=== Logging ===
	50	+
	51	+When a virus scan is run by Microsoft Defender's //Malware Protection Command Line Utility//, the results are written to an MpCmdRun.log file. This allows the exact command line return of the scan to be traced. Usually this log file is located in the local temp directory. For example: //C:\Users\<UserName>\AppData\Local\Temp\MpCmdRun.log//