Event Type - Protection Realtime Antivirus Status
Description
The endpoint protection's antivirus functionality is enabled, disabled, snoozed, or expired
Parameters
| Parameter Name | Type | Default Value | Allowed Values | Description |
|---|---|---|---|---|
| Protection Status | Mask | Disabled, Snoozed, Expired | Disabled, Snoozed, Expired, Enabled | Select what protection states should signal the event. The event will be signaled when it changes to one of the given states. |