🛡️ Antivirus Compliance Policy

Confirms the tenant's antivirus is registered and running.

pick the vendor | take both files | upload the script, attach the JSON

Discovery script Win-Compliance-AV-Sophos.ps1

Rules file Win-Compliance-AV-Sophos.json

Run as System, 64 bit, no signature check

Script

Rules

Notes

Confirm the display name on one real device before you assign this. Get-CimInstance -Namespace root\SecurityCenter2 -ClassName AntiVirusProduct tells you exactly what the vendor registered.