Sign in
 
HomeProductsLibraryLearnDownloadsSupportForums
Microsoft Forefront TechCenter >
> 
> 
How can I view endpoint protection scan history?

Answered How can I view endpoint protection scan history?

  • Tuesday, November 20, 2012 5:27 PM
     
     
    Sign In to Vote
    0

    I'm using Forefront Endpoint Protection 2010 and I can not find anywhere where I can view the previous scan history. Does anyone know where this can be found at?

    Thanks!

     

All Replies

  • Tuesday, November 20, 2012 8:56 PM
     
     
    Sign In to Vote
    0

    An easy way to do this on a client is to look at the system log in the Event Viewer. Group the events by the Source column, locate the source Microsoft Antimalware, and then sort the events by Date and Time or by event ID.

    When a scan starts, event ID 1000 is recorded

    When a scan finishes, event ID 1001 is recorded

    When a scan is stopped before completion, event ID 1002 is recorded

     
  • Wednesday, November 21, 2012 8:17 AM
    Moderator
     
     Answered
    Sign In to Vote
    0

    Hi,

    Thank you for the post.

    You can review the scan log on the client to know the scan history.

    Location: %allusersprofile%\Microsoft\Microsoft Antimalware\Support

    Name: MPLog-XYZ.log (XYZ is the date)

    Regards,

    Nick Gu - MSFT