HEX
Server: Apache/2.4.46 (Win64) OpenSSL/1.1.1j PHP/8.4.25
System: Windows NT DESKTOP-4TAV2RJ 10.0 build 19045 (Windows 10) AMD64
User: fred (0)
PHP: 8.4.25
Disabled: NONE
Upload Files
File: C:/Program Files/Windows Defender/zh-TW/ProtectionManagement.mfl
��#pragma autorecover

#pragma namespace("\\\\.\\root\\Microsoft\\Windows\\Defender")

instance of __namespace{ name="MS_404";};

#pragma namespace("\\\\.\\root\\Microsoft\\Windows\\Defender\\MS_404")



[Description("�/fo�:y�Wy�rKa�v�ba�^�%R0") : Amended ToSubclass,AMENDMENT, LOCALE("MS_404")] 

class BaseStatus

{

};



[Description("�/fo�:y�Wy�rKa�v�ba�^�%R0") : Amended ToSubclass,AMENDMENT, LOCALE("MS_404")] 

class MSFT_MpComputerStatus : BaseStatus

{

  [Description("1u MAPS �^�z�v��f�X�%R�x") : Amended ToSubclass,key] string ComputerID;

  [Description("�vMR�v��f��rKa") : Amended ToSubclass,BitValues{"CleanState", "PendingFullScan", "PendingReboot", "PendingManualSteps", "PendingOfflineScan", "CriticalFailure"} : Amended ToSubclass] uint32 ComputerState;

  [Description(""u�THr,g (;N���!k���D}�^��O�)") : Amended ToSubclass] string AMProductVersion;

  [Description("
g�RHr,g (;N���!k���D}�^��O�)") : Amended ToSubclass] string AMServiceVersion;

  [Description("�S��܊�R��yr�_�xHr,g (;N���!k���D}�^��O�)") : Amended ToSubclass] string AntispywareSignatureVersion;

  [Description("�S��܊�R��yr�_�x�vX[Yug ()Y) - �Y�gyr�_�x�_*g�f�eN��X[Yug\o�:y�p 65535 )Y") : Amended ToSubclass] uint32 AntispywareSignatureAge;

  [Description("�S��܊�R��
N!k�f�e�v,g0WBf��0�Y�gdkBf���_*g�f�eN��dkl\'`\o�:yzz<P") : Amended ToSubclass] datetime AntispywareSignatureLastUpdated;

  [Description("2��kyr�_�xHr,g (;N���!k���D}�^��O�)") : Amended ToSubclass] string AntivirusSignatureVersion;

  [Description("2��kyr�_�x�vX[Yug ()Y) - �Y�gyr�_�x�_*g�f�eN��X[Yug\o�:y�p 65535 )Y") : Amended ToSubclass] uint32 AntivirusSignatureAge;

  [Description("2��k
N!k�f�e�v,g0WBf�� - �Y�gdkBf���_*g�f�eN��dkl\'`\o�:y�pzz<P") : Amended ToSubclass] datetime AntivirusSignatureLastUpdated;

  [Description("NRI yr�_�xHr,g (;N���!k���D}�^��O�)") : Amended ToSubclass] string NISSignatureVersion;

  [Description("NRI yr�_�x�vX[Yug ()Y) - �Y�gyr�_�x�_*g�f�eN��X[Yug\o�:y�p 65535 )Y") : Amended ToSubclass] uint32 NISSignatureAge;

  [Description("NRI 
N!k�f�e�v,g0WBf�� - �Y�gdkBf���_*g�f�eN��dkl\'`\o�:y�pzz<P") : Amended ToSubclass] datetime NISSignatureLastUpdated;

  [Description("
N!k�[te�c�c���Y�vBf�� - �Y�gdkBf���_*g�f�eN��dkl\'`\o�:y�pzz<P") : Amended ToSubclass] datetime FullScanStartTime;

  [Description("
N!k�[te�c�cP}_g�vBf�� - �Y�gdkBf���_*g�f�eN��dkl\'`\o�:y�pzz<P") : Amended ToSubclass] datetime FullScanEndTime;

  [Description("
N!k�[te�c�c�vX[Yug ()Y) - �Y�gyr�_�x�_*g�f�eN��X[Yug\o�:y�p 65535 )Y") : Amended ToSubclass] uint32 FullScanAge;

  [Description("
N!k�c�c�O�n") : Amended ToSubclass,Values{"!q�l��X�", "O(u�", "�|q}", "sSBf", "IOAV"} : Amended ToSubclass] uint8 LastFullScanSource;

  [Description("sSBf�c�c�eTR	�") : Amended ToSubclass,Values{"iQ�", "#�eQ", "#��Q"} : Amended ToSubclass] uint8 RealTimeScanDirection;

  [Description("
N!k�_��c�c���Y�vBf�� - �Y�gdkBf���_*g�f�eN��dkl\'`\o�:y�pzz<P") : Amended ToSubclass] datetime QuickScanStartTime;

  [Description("
N!k�_��c�cP}_g�vBf�� - �Y�gdkBf���_*g�f�eN��dkl\'`\o�:y�pzz<P") : Amended ToSubclass] datetime QuickScanEndTime;

  [Description("
N!k�_��c�c�vX[Yug ()Y) - �Y�gyr�_�x�_*g�f�eN��X[Yug\o�:y�p 65535 )Y0") : Amended ToSubclass] uint32 QuickScanAge;

  [Description("
N!k�c�c�O�n") : Amended ToSubclass,Values{"!q�l��X�", "O(u�", "�|q}", "sSBf", "IOAV"} : Amended ToSubclass] uint8 LastQuickScanSource;

  [Description("AM _�dHr,g (;N���!k���D}�^��O�)") : Amended ToSubclass] string AMEngineVersion;

  [Description("AM _�d�]/f&T_U(u") : Amended ToSubclass] boolean AMServiceEnabled;

  [Description("c�[��f�/f&T���v����f�
N�v�jHh�z_;m�R") : Amended ToSubclass] boolean OnAccessProtectionEnabled;

  [Description("�c�c@b	gN	��v�jHh�D��N") : Amended ToSubclass] boolean IoavProtectionEnabled;

  [Description("c�[/f&T��_U(uL��p�v��") : Amended ToSubclass] boolean BehaviorMonitorEnabled;

  [Description("c�[/f&T��_U(u2��k�Ow�") : Amended ToSubclass] boolean AntivirusEnabled;

  [Description("c�[/f&T��_U(u�S��܊�R���Ow�") : Amended ToSubclass] boolean AntispywareEnabled;

  [Description("c�[��f�/f&T�p[��d_jhV") : Amended ToSubclass] boolean IsVirtualMachine;

  [Description("c�Q��f�/f&T�]��_U�z9e2�w�") : Amended ToSubclass] boolean IsTamperProtected;

  [Description("c�[/f&T��_U(usSBf�Ow�") : Amended ToSubclass] boolean RealTimeProtectionEnabled;

  [Description("NRI _�dHr,g (;N���!k���D}�^��O�)") : Amended ToSubclass] string NISEngineVersion;

  [Description("NRI _�d/f&T�]_U(u") : Amended ToSubclass] boolean NISEnabled;

};



[Version("1.0") : Amended,Description("Microsoft Defender 2��kߎԚ�N�Nc:y^�%R") : Amended ToSubclass,AMENDMENT, LOCALE("MS_404")] 

class MSFT_MpEvent

{

  [Description("��w^�%R0") : Amended ToSubclass,Values{"ScanStateNotifications", "ThreatStateNotifications", "SignatureStateNotifications", "ComputerStateNotifications"} : Amended ToSubclass,key] uint32 CategoryDiscriminant;

  [Description("s�0}�c�c��w0") : Amended ToSubclass,BitValues{"ErrorOccurred", "ScanCompleted"} : Amended ToSubclass] uint32 ScanNotificationsValue;

  [Description("s�0}Z���w0") : Amended ToSubclass,BitValues{"�]uP,n", "�]>e�h", "SuccessfulRemediation", "NonCriticalFailure", "CriticalFailure"} : Amended ToSubclass] uint32 ThreatNotificationsValue;

  [Description("s�0}=|�z��w0") : Amended ToSubclass,BitValues{"SignaturesOutOfDate"} : Amended ToSubclass] uint32 SignatureNotificationsValue;

  [Description("s�0}��f���w0") : Amended ToSubclass,BitValues{"RebootRequired", "FullScanRequired", "OfflineScanRequired", "ManualStepsRequired", "ScansOutOfDate", "ComponentsChanged", "StateRecovered"} : Amended ToSubclass] uint32 ComputerNotificationsValue;

  [Description(""uu WMI �N�N�v�eg�TBf��") : Amended ToSubclass] datetime NotificationTime;

  [Description("vQ�Nnj�e0�vMR/UN�vO(u�`�l/fvu CategoryDiscriminant I{�e ThreatStateNotificationsthen Bf�dk<P\S+T ThreatID") : Amended ToSubclass] uint32 AdditionalData;

};



[Version("1.0") : Amended,Description("Microsoft Defender 2��kߎԚ�_�^�%R") : Amended ToSubclass,AMENDMENT, LOCALE("MS_404")] 

class MSFT_MpHeartBeat

{

};



[Version("1.0") : Amended,Description("Microsoft Defender 2��kߎԚOP}Y-��[^�%R") : Amended ToSubclass,AMENDMENT, LOCALE("MS_404")] 

class MSFT_MpPreference

{

  [Description("1u MAPS �^�z�v��f�X�%R�x") : Amended ToSubclass,key] string ComputerID;

  [Description("AQ1��|q}�{t�Tc�[/f&T�ar�ܕ�� Server SKU �v0��R�cd�
0�R��0") : Amended ToSubclass] boolean DisableAutoExclusions;

  [Description("AQ1��|q}�{t�Tf�x\P(u�j�g@b	gR�Q_�v�c�c0") : Amended ToSubclass] string ExclusionPath[];

  [Description("AQ1��|q}�{t�Tf�x\P(u�j�g@b	gR�QoR�j
T�v�c�c0") : Amended ToSubclass] string ExclusionExtension[];

  [Description("AQ1��|q}�{t�Tf�x\P(u�j�g@b	gR�QU�tz�^�v�c�c0") : Amended ToSubclass] string ExclusionProcess[];

  [Description("c�Q��v�a�OYu(W [���] nj�e>Y�v)Yxe��}N�dkBf��KN�_sSg�N�N�yd�0") : Amended ToSubclass] uint32 QuarantinePurgeItemsAfterDelay;

  [Description("sSBf�c�c�eT - R	�") : Amended ToSubclass,Values{"iQ�", "#�eQ", "#��Q"} : Amended ToSubclass] uint8 RealTimeScanDirection;

  [Description("c�Q��(Wfg~^�WL��c�[�v�[te�c�c�N�[b܈Qe0") : Amended ToSubclass,Values{"�k)Y", "fg�e", "fgN", "fg�N", "fg	N", "fg�V", "fg�N", "fgmQ", "8l
N"} : Amended ToSubclass] uint8 RemediationScheduleDay;

  [Description("c�Q��(W�N��Bf���WL��c�[�v�[te�c�c�N�[b܈Qe0") : Amended ToSubclass] datetime RemediationScheduleTime;

  [Description("-��[���M�Y�R\OKNuP,n�v>�Bf0") : Amended ToSubclass] uint32 ReportingAdditionalActionTimeOut;

  [Description("uP,n�_0�V͑1YWe
0�rKa���f�p0vQ�N�R\O
0b0�]nd�
0�rKa�vBf�� (R�)0") : Amended ToSubclass] uint32 ReportingCriticalFailureTimeOut;

  [Description("uP,n�_01YWe
0�rKa���f�p0�]nd�
0�rKa�vBf�� (R�)0") : Amended ToSubclass] uint32 ReportingNonCriticalTimeOut;

  [Description("c�[�c�cg���v CPU O(u�s~vR�k
NP�0dk�SGR-��[�S���`c�[�c�cg��AQ1��v CPU O(u�s~vR�k
NP�0dk-��[�v	gHe<P/f�Ntexe 5 0R 100 �Nh��v~vR�k0<P 0 h�:y
Nݑ
\ CPU O(u�s2�L��{AmU�t0") : Amended ToSubclass] uint8 ScanAvgCPULoadFactor;

  [Description("-��[Bf�Microsoft Defender 2��kߎԚg(W�WL��c�cMR�j�g�e�v=|�z0�Y�g(W�c�c���YMR~b0R�e�v=|�z�\N	�&N�[݈0�Y�g~b
N0R�NUO�e�v=|�z�GR\g9h�d�s	g�v=|�z���Y�c�c0") : Amended ToSubclass] boolean CheckForSignaturesBeforeRunningScan;

  [Description("��_U�_�c�cwkz��nj�e>Y�yd���v�v�R��0dk-��[�S�[���v�a�OYu(W�c�cwkz��nj�e>Y-N�v)Yxe��}N�dkBf��KN�_sSg\��v8lEN�yd�0<P�Nh���v���OYu(Wr�nj�e>Y-N�v)Yxe0�-��[�p���\g8l`��OYu��v��
Ng��R\��v�yd�0") : Amended ToSubclass] uint32 ScanPurgeItemsAfterDelay;

  [Description("�S	gvu�|q}U��e��n�rKaBf�Mb�WL��c�[�v�c�c0") : Amended ToSubclass] boolean ScanOnlyIfIdleEnabled;

  [Description("c�[�c�[�v�c�c@bO(u�v�c�c^��W0") : Amended ToSubclass,Values{"�_��c�c", "�[te�c�c"} : Amended ToSubclass] uint8 ScanParameters;

  [Description("c�[fg~^�WL��c�[�v�c�c0") : Amended ToSubclass,Values{"�k)Y", "fg�e", "fgN", "fg�N", "fg	N", "fg�V", "fg�N", "fgmQ", "8l
N"} : Amended ToSubclass] uint8 ScanScheduleDay;

  [Description("c�[N)Yvu-N���WL��]�c�[KN�_��c�c�vBf��0") : Amended ToSubclass] datetime ScanScheduleQuickScanTime;

  [Description("c�[�WL��c�[KN�c�c�vBf��0") : Amended ToSubclass] datetime ScanScheduleTime;

  [Description("(W��!k�[݈�_-��[�vBf��gQ�N�_-Nbk
g�Rw��Y�v@b	g�f�e0") : Amended ToSubclass] uint32 SignatureFirstAuGracePeriod;

  [Description("���[ CheckForSignatureBeforeRunningScan0�Y�gyr�_�x(WdkBf��gQ�)R�f�e�GR-Nbk
g�Rw��Y�v@b	g�f�e0Bf���NR��p�UMO0") : Amended ToSubclass] uint32 SignatureAuGracePeriod;

  [Description("�[�(u�eN	��[hQ'`�`1X�f�e�v�jHhqQ(u0dk-��[�S���`c�[ UNC �jHhqQ(u�O�n��NX[>eN	��v�[hQ'`�`1X�f�e0\�Nc�[�v��^#��}0R�f�e�O�n0�`�_�O(u�N�{�}R���vW[2Nb__c�[dk-��[�v<P��OR	��[hQ'`�`1X�f�e�O�n0�O�Y: {\\unc1 | \\unc2 }0dkn�U�-�/fzz�v0") : Amended ToSubclass] string SignatureDefinitionUpdateFileSharesSources;

  [Description("�-��[�p True�!q֊/f&T	g_�d�AM 
g�R��
Ng(W_U�RBfw��Y�[hQ�`1X�f�e0") : Amended ToSubclass] boolean SignatureDisableUpdateOnStartupWithoutEngine;

  [Description("�[�N	��[hQ'`�`1X�f�e�v�O�n��^0dk-��[�S���`c�[#��}0R
NT�[hQ'`�`1X�f�e�O�nBf��O(u�v��^0�`�_�O(u�N�{�}R���vW[2Nb__c�[dk-��[�v<P��O�O�^R	��[hQ'`�`1X�f�e�O�n0�S���v<P/f: 'InternalDefinitionUpdateServer'  'MicrosoftUpdateServer'  'MMPC'  'FileShares' ") : Amended ToSubclass] string SignatureFallbackOrder;

  [Description("c�Q��(Wfg~^�f�e�[hQ�`1X0�-��[�p�� (0x0)�h�:y���k)Y�f�e�[hQ�`1X0") : Amended ToSubclass,Values{"�k)Y", "fg�e", "fgN", "fg�N", "fg	N", "fg�V", "fg�N", "fgmQ", "8l
N"} : Amended ToSubclass] uint8 SignatureScheduleDay;

  [Description("c�[�a�WL��[hQ�`1X�f�e�j�g�vBf��09h�d�-��g(W�WL��c�[�v�c�cKNMR�j�g/f&T	g�[hQ�`1X�f�e0") : Amended ToSubclass] datetime SignatureScheduleTime;

  [Description("�[��_���܈yr�_�x�v)Yxe0-dM� SignatureUpdateLastChecked O(u00 = 
N��܈; 1 = 1 )Y; 2 = 2 )Y��Odk^��c0") : Amended ToSubclass] uint32 SignatureUpdateCatchupInterval;

  [Description("Bf��<P/f�N�f�e�j�g���� (\Bf) h�:y0	gHe�v<P�N�e 1 (�k\BfN!k) 0R 24 (�k)YN!k) KN��0") : Amended ToSubclass] uint32 SignatureUpdateInterval;

  [Description("�ReQ Microsoft MAPS0") : Amended ToSubclass,Values{"Disabled", "Basic", "Advanced"} : Amended ToSubclass] uint8 MAPSReporting;

  [Description("Ta#j,g�c�N0") : Amended ToSubclass,Values{"AlwaysPrompt", "SendSafeSamples", "NeverSend", "SendAllSamples"} : Amended ToSubclass] uint8 SubmitSamplesConsent;

  [Description("\P(u���y
k!j_0") : Amended ToSubclass] boolean DisablePrivacyMode;

  [Description("�P-��[�S���`_U(ub\P(u��_j�c�[�c�c�T�[hQ�`1X�f�e�v���YBf��0�P-��[�S(u�ORce�c�c
\nj�n�vq_��0�O�Y��`�S�N(WqQ(u;N_j�vY萢[Ԛ[��d_jhV-NO(u��-��[��N�MQY萢[Ԛ[��d_jhVTBf�WL�'YϑX[�S�x�x�v�d\O0") : Amended ToSubclass] boolean RandomizeScheduleTaskTimes;

  [Description("\P(uL��p�v��0") : Amended ToSubclass] boolean DisableBehaviorMonitoring;

  [Description("\P(ueQ�O�2��|q}0") : Amended ToSubclass] boolean DisableIntrusionPreventionSystem;

  [Description("\P(u IOAV �Ow�0") : Amended ToSubclass] boolean DisableIOAVProtection;

  [Description("\P(usSBf�v��0") : Amended ToSubclass] boolean DisableRealtimeMonitoring;

  [Description("\P(uc�N�x�c�c0") : Amended ToSubclass] boolean DisableScriptScanning;

  [Description("\P(u\X[�c�c0") : Amended ToSubclass] boolean DisableArchiveScanning;

  [Description("\P(u��܈�[te�c�c0��܈�c�c/fN.z�V�p/�N��]�c�[�v�[g�c�c��WL��v�c�c0/�N��]�c�[�v�c�c�v�S�V�8^/f��f�(W�c�[�vBf��&N*g��_j0") : Amended ToSubclass] boolean DisableCatchupFullScan;

  [Description("\P(u��܈�_��c�c0��܈�c�c/fN.z�V�p/�N��]�c�[�v�[g�c�c��WL��v�c�c0/�N��]�c�[�v�c�c�v�S�V�8^/f��f�(W�c�[�vBf��&N*g��_j0") : Amended ToSubclass] boolean DisableCatchupQuickScan;

  [Description("\P(u��P[���N�c�c0") : Amended ToSubclass] boolean DisableEmailScanning;

  [Description("\P(u�b�S_�x�x_j�c�c0") : Amended ToSubclass] boolean DisableRemovableDriveScanning;

  [Description("\P(u���Sޞ0") : Amended ToSubclass] boolean DisableRestorePoint;

  [Description("\P(u(W#��}�v�}�x�x_j
N�WL��[te�c�c0") : Amended ToSubclass] boolean DisableScanningMappedNetworkDrivesForFullScan;

  [Description("\P(u�}jHh�c�c0") : Amended ToSubclass] boolean DisableScanningNetworkFiles;

  [Description("_U(u UI ���[!j_0") : Amended ToSubclass] boolean UILockdown;

  [Description("uP,n0RZ�Bf
N(WvQ
N�WL��-��R\O�vZ�X�%R�x0ThreatIDDefaultAction_Actions -N�v�R\O��^�_�� ThreatIDDefaultAction_Ids -N�vX�%R�x��^�vT") : Amended ToSubclass] sint64 ThreatIDDefaultAction_Ids[];

  [Description("uP,n0RZ�Bf
N(WvQ
N�WL��-��R\O�v�-��R\O0��N�R\O�v��^�_�� ThreatIDDefaultAction_Ids l\'`-Nc�[�v
\�aX�%R�x��^�vT0") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] uint8 ThreatIDDefaultAction_Actions[];

  [Description("
NfZ��v�-��R\O0") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] uint8 UnknownThreatDefaultAction;

  [Description("NO�^�V͑'`Z��v�-��R\O0") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] uint8 LowThreatDefaultAction;

  [Description("-N�^�V͑'`Z��v�-��R\O0") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] uint8 ModerateThreatDefaultAction;

  [Description("ؚ�^�V͑'`Z��v�-��R\O0") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] uint8 HighThreatDefaultAction;

  [Description("Default action for severe severity threats.") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] uint8 SevereThreatDefaultAction;

  [Description("Specify PUA(Potentially Unwanted Application) protection mode.") : Amended ToSubclass,Values{"Disabled", "�]_U(u", "AuditMode"} : Amended ToSubclass] uint8 PUAProtection;

  [Description("\P(u,{N!kw��Bf\���v�R��0") : Amended ToSubclass] boolean DisableBlockAtFirstSeen;

  [Description("Configure cloud protection level.") : Amended ToSubclass,Values{"Default", "-N", "ؚ", "High+", "Zero tolerance"} : Amended ToSubclass] uint8 CloudBlockLevel;

  [Description("-��[�^w���z�j�g0	gHe<P 0-50 �y0") : Amended ToSubclass] uint32 CloudExtendedTimeout;

  [Description("Configure Microsoft Defender Exploit Guard network protection feature.") : Amended ToSubclass,Values{"Disabled", "�]_U(u", "Audit Mode"} : Amended ToSubclass] uint8 EnableNetworkProtection;

  [Description("-��[ [�S�cnj�e>YX[�S
k] �R��0") : Amended ToSubclass,Values{"Disabled", "�]_U(u", "AuditMode", "BlockDiskModificationOnly", "AuditDiskModificationOnly"} : Amended ToSubclass] uint8 EnableControlledFolderAccess;

  [Description("Specify the exclusions for Attack Surface Reduction Rules(ASR).") : Amended ToSubclass] string AttackSurfaceReductionOnlyExclusions[];

  [Description("Specify Attack Surface Reduction Rule(ASR) Ids. The rule Ids need to be in the same order as their respective actions specified in the AttackSurfaceReductionRules_Actions property.") : Amended ToSubclass] string AttackSurfaceReductionRules_Ids[];

  [Description("Default actions for Attack Surface Reduction Rule(ASR). The actions need to be in the same order as their respective rule Ids specified in the AttackSurfaceReductionRules_Ids property.") : Amended ToSubclass,Values{"Disabled", "�]_U(u", "Audit Mode"} : Amended ToSubclass] uint8 AttackSurfaceReductionRules_Actions[];

  [Description("Add allowed applications to the Controlled folder access feature.") : Amended ToSubclass] string ControlledFolderAccessAllowedApplications[];

  [Description("Add protected folders to the Controlled folder access feature.") : Amended ToSubclass] string ControlledFolderAccessProtectedFolders[];

  [Description("Defines a file share for security intelligence in virtual environments.") : Amended ToSubclass] string SharedSignaturesPath;

  [Description("Configure whether low cpu priority should be used during scheduled scan.") : Amended ToSubclass] boolean EnableLowCpuPriority;

  [Description("Enables or disables file hash computation feature.") : Amended ToSubclass] boolean EnableFileHashComputation;

  uint32 Set([In,Description("AQ1��|q}�{t�Tc�[/f&T�ar�ܕ�� Server SKU �v0��R�cd�
0�R��0") : Amended ToSubclass] boolean DisableAutoExclusions,[In,Description("AQ1��|q}�{t�Tf�x\P(u�j�g@b	gR�Q_�v�c�c0") : Amended ToSubclass] string ExclusionPath[],[In,Description("AQ1��|q}�{t�Tf�x\P(u�j�g@b	gR�QoR�j
T�v�c�c0") : Amended ToSubclass] string ExclusionExtension[],[In,Description("AQ1��|q}�{t�Tf�x\P(u�j�g@b	gR�QU�tz�^�v�c�c0") : Amended ToSubclass] string ExclusionProcess[],[In,Description("c�Q��v�a�OYu(W [���] nj�e>Y�v)Yxe��}N�dkBf��KN�_sSg�N�N�yd�0") : Amended ToSubclass] uint32 QuarantinePurgeItemsAfterDelay,[In,Description("sSBf�c�c�eT - R	�") : Amended ToSubclass,Values{"iQ�", "#�eQ", "#��Q"} : Amended ToSubclass] uint8 RealTimeScanDirection,[In,Description("c�Q��(Wfg~^�WL��c�[�v�[te�c�c�N�[b܈Qe0") : Amended ToSubclass,Values{"�k)Y", "fg�e", "fgN", "fg�N", "fg	N", "fg�V", "fg�N", "fgmQ", "8l
N"} : Amended ToSubclass] uint8 RemediationScheduleDay,[In,Description("c�Q��(W�N��Bf���WL��c�[�v�[te�c�c�N�[b܈Qe0") : Amended ToSubclass] datetime RemediationScheduleTime,[In,Description("-��[���M�Y�R\OKNuP,n�v>�Bf0") : Amended ToSubclass] uint32 ReportingAdditionalActionTimeOut,[In,Description("uP,n�_0�V͑1YWe
0�rKa���f�p0vQ�N�R\O
0b0�]nd�
0�rKa�vBf�� (R�)0") : Amended ToSubclass] uint32 ReportingCriticalFailureTimeOut,[In,Description("uP,n�_01YWe
0�rKa���f�p0�]nd�
0�rKa�vBf�� (R�)0") : Amended ToSubclass] uint32 ReportingNonCriticalTimeOut,[In,Description("c�[�c�cg���v CPU O(u�s~vR�k
NP�0dk�SGR-��[�S���`c�[�c�cg��AQ1��v CPU O(u�s~vR�k
NP�0dk-��[�v	gHe<P/f�Ntexe 5 0R 100 �Nh��v~vR�k0<P 0 h�:y
Nݑ
\ CPU O(u�s2�L��{AmU�t0") : Amended ToSubclass] uint8 ScanAvgCPULoadFactor,[In,Description("-��[Bf�Microsoft Defender 2��kߎԚg(W�WL��c�cMR�j�g�e�v=|�z0�Y�g(W�c�c���YMR~b0R�e�v=|�z�\N	�&N�[݈0�Y�g~b
N0R�NUO�e�v=|�z�GR\g9h�d�s	g�v=|�z���Y�c�c0") : Amended ToSubclass] boolean CheckForSignaturesBeforeRunningScan,[In,Description("��_U�_�c�cwkz��nj�e>Y�yd���v�v�R��0dk-��[�S�[���v�a�OYu(W�c�cwkz��nj�e>Y-N�v)Yxe��}N�dkBf��KN�_sSg\��v8lEN�yd�0<P�Nh���v���OYu(Wr�nj�e>Y-N�v)Yxe0�-��[�p���\g8l`��OYu��v��
Ng��R\��v�yd�0") : Amended ToSubclass] uint32 ScanPurgeItemsAfterDelay,[In,Description("�S	gvu�|q}U��e��n�rKaBf�Mb�WL��c�[�v�c�c0") : Amended ToSubclass] boolean ScanOnlyIfIdleEnabled,[In,Description("c�[�c�[�v�c�c@bO(u�v�c�c^��W0") : Amended ToSubclass,Values{"�_��c�c", "�[te�c�c"} : Amended ToSubclass] uint8 ScanParameters,[In,Description("c�[fg~^�WL��c�[�v�c�c0") : Amended ToSubclass,Values{"�k)Y", "fg�e", "fgN", "fg�N", "fg	N", "fg�V", "fg�N", "fgmQ", "8l
N"} : Amended ToSubclass] uint8 ScanScheduleDay,[In,Description("c�[N)Yvu-N���WL��]�c�[KN�_��c�c�vBf��0") : Amended ToSubclass] datetime ScanScheduleQuickScanTime,[In,Description("c�[�WL��c�[KN�c�c�vBf��0") : Amended ToSubclass] datetime ScanScheduleTime,[In,Description("(W��!k�[݈�_-��[�vBf��gQ�N�_-Nbk
g�Rw��Y�v@b	g�f�e0") : Amended ToSubclass] uint32 SignatureFirstAuGracePeriod,[In,Description("���[ CheckForSignatureBeforeRunningScan0�Y�gyr�_�x(WdkBf��gQ�)R�f�e�GR-Nbk
g�Rw��Y�v@b	g�f�e0Bf���NR��p�UMO0") : Amended ToSubclass] uint32 SignatureAuGracePeriod,[In,Description("�[�(u�eN	��[hQ'`�`1X�f�e�v�jHhqQ(u0dk-��[�S���`c�[ UNC �jHhqQ(u�O�n��NX[>eN	��v�[hQ'`�`1X�f�e0\�Nc�[�v��^#��}0R�f�e�O�n0�`�_�O(u�N�{�}R���vW[2Nb__c�[dk-��[�v<P��OR	��[hQ'`�`1X�f�e�O�n0�O�Y: {\\unc1 | \\unc2 }0dkn�U�-�/fzz�v0") : Amended ToSubclass] string SignatureDefinitionUpdateFileSharesSources,[In,Description("�-��[�p True�!q֊/f&T	g_�d�AM 
g�R��
Ng(W_U�RBfw��Y�[hQ�`1X�f�e0") : Amended ToSubclass] boolean SignatureDisableUpdateOnStartupWithoutEngine,[In,Description("�[�N	��[hQ'`�`1X�f�e�v�O�n��^0dk-��[�S���`�[�
NT�[hQ'`�`1X�f�e�O�n�a#�a}�v��^0�a\dk-��[<P\O�p�N�{S�R���vW[&{2N8�eQ�	c��^�g	��[hQ�`1X�f�e�O�n0�S���vxe<P�p�0InternalDefinitionUpdateServer
00MicrosoftUpdateServer
00MMPC
00FileShares
0 ") : Amended ToSubclass] string SignatureFallbackOrder,[In,Description("c�Q��(Wfg~^�f�e�[hQ�`1X0�-��[�p���h�:y���k)Y�f�e�[hQ�`1X0") : Amended ToSubclass,Values{"�k)Y", "fg�e", "fgN", "fg�N", "fg	N", "fg�V", "fg�N", "fgmQ", "8l
N"} : Amended ToSubclass] uint8 SignatureScheduleDay,[In,Description("c�[�a�WL��[hQ�`1X�f�e�j�g�vBf��09h�d�-��g(W�WL��c�[�v�c�cKNMR�j�g/f&T	g�[hQ�`1X�f�e0") : Amended ToSubclass] datetime SignatureScheduleTime,[In,Description("�[��d�O��܈=|�z�v)Yxe0-dM� SignatureUpdateLastChecked O(u00 = 
N��܈�1 = 1 )Y�2 = 2 )Y��Odk^��c0") : Amended ToSubclass] uint32 SignatureUpdateCatchupInterval,[In,Description("Bf��<P/f�N�f�e�j�g���� (\Bf) h�:y0	gHe�v<P�N�e 1 (�k\BfN!k) 0R 24 (�k)YN!k) KN��0") : Amended ToSubclass] uint32 SignatureUpdateInterval,[In,Description("�ReQ Microsoft MAPS0") : Amended ToSubclass,Values{"Disabled", "Basic", "Advanced"} : Amended ToSubclass] uint8 MAPSReporting,[In,Description("Ta#j,g�c�N0") : Amended ToSubclass,Values{"AlwaysPrompt", "SendSafeSamples", "NeverSend", "SendAllSamples"} : Amended ToSubclass] uint8 SubmitSamplesConsent,[Description("\P(u���y
k!j_0") : Amended ToSubclass,in] boolean DisablePrivacyMode,[In,Description("�P-��[�S���`_U(ub\P(u��_j�c�[�c�c�T�[hQ�`1X�f�e�v���YBf��0�P-��[�S(u�ORce�c�c
\nj�n�vq_��0�O�Y��`�S�N(WqQ(u;N_j�vY萢[Ԛ[��d_jhV-NO(u��-��[��N�MQY萢[Ԛ[��d_jhVTBf�WL�'YϑX[�S�x�x�v�d\O0") : Amended ToSubclass] boolean RandomizeScheduleTaskTimes,[In,Description("\P(uL��p�v��0") : Amended ToSubclass] boolean DisableBehaviorMonitoring,[In,Description("\P(ueQ�O�2��|q}0") : Amended ToSubclass] boolean DisableIntrusionPreventionSystem,[In,Description("\P(u IOAV �Ow�0") : Amended ToSubclass] boolean DisableIOAVProtection,[In,Description("\P(usSBf�v��0") : Amended ToSubclass] boolean DisableRealtimeMonitoring,[In,Description("\P(uc�N�x�c�c0") : Amended ToSubclass] boolean DisableScriptScanning,[In,Description("\P(u\X[�c�c0") : Amended ToSubclass] boolean DisableArchiveScanning,[In,Description("\P(u��܈�[te�c�c0��܈�c�c/fN.z�V�p/�N��]�c�[�v�[g�c�c��WL��v�c�c0/�N��]�c�[�v�c�c�v�S�V�8^/f��f�(W�c�[�vBf��&N*g��_j0") : Amended ToSubclass] boolean DisableCatchupFullScan,[In,Description("\P(u��܈�_��c�c0��܈�c�c/fN.z�V�p/�N��]�c�[�v�[g�c�c��WL��v�c�c0/�N��]�c�[�v�c�c�v�S�V�8^/f��f�(W�c�[�vBf��&N*g��_j0") : Amended ToSubclass] boolean DisableCatchupQuickScan,[In,Description("\P(u��P[���N�c�c0") : Amended ToSubclass] boolean DisableEmailScanning,[In,Description("\P(u�b�S_�x�x_j�c�c0") : Amended ToSubclass] boolean DisableRemovableDriveScanning,[In,Description("\P(u���Sޞ0") : Amended ToSubclass] boolean DisableRestorePoint,[In,Description("\P(u(W#��}�v�}�x�x_j
N�WL��[te�c�c0") : Amended ToSubclass] boolean DisableScanningMappedNetworkDrivesForFullScan,[In,Description("\P(u�}jHh�c�c0") : Amended ToSubclass] boolean DisableScanningNetworkFiles,[In,Description("_U(u UI ���[!j_0") : Amended ToSubclass] boolean UILockdown,[In,Description("uP,n0RZ�Bf
N(WvQ
N�WL��-��R\O�vZ�X�%R�x0ThreatIDDefaultAction_Actions -N�v�R\O��^�_�� ThreatIDDefaultAction_Ids -N�vX�%R�x��^�vT") : Amended ToSubclass] sint64 ThreatIDDefaultAction_Ids[],[In,Description("uP,n0RZ�Bf
N(WvQ
N�WL��-��R\O�v�-��R\O0��N�R\O�v��^�_�� ThreatIDDefaultAction_Ids l\'`-Nc�[�v
\�aX�%R�x��^�vT0") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] uint8 ThreatIDDefaultAction_Actions[],[In,Description("
NfZ��v�-��R\O0") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] uint8 UnknownThreatDefaultAction,[In,Description("NO�^�V͑'`Z��v�-��R\O0") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] uint8 LowThreatDefaultAction,[In,Description("-N�^�V͑'`Z��v�-��R\O0") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] uint8 ModerateThreatDefaultAction,[In,Description("ؚ�^�V͑'`Z��v�-��R\O0") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] uint8 HighThreatDefaultAction,[In,Description("Default action for severe severity threats.") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] uint8 SevereThreatDefaultAction,[In,Description("Specify PUA(Potentially Unwanted Application) protection mode.") : Amended ToSubclass,Values{"Disabled", "�]_U(u", "AuditMode"} : Amended ToSubclass] uint8 PUAProtection,[In,Description("\P(u,{N!kw��Bf\���v�R��0") : Amended ToSubclass] boolean DisableBlockAtFirstSeen,[In,Description("Configure cloud protection level.") : Amended ToSubclass,Values{"Default", "-N", "ؚ", "High+", "Zero tolerance"} : Amended ToSubclass] uint8 CloudBlockLevel,[In,Description("-��[�^w���z�j�g0	gHe<P 0-50 �y0") : Amended ToSubclass] uint32 CloudExtendedTimeout,[In,Description("Configure Microsoft Defender Exploit Guard network protection feature.") : Amended ToSubclass,Values{"Disabled", "�]_U(u", "Audit Mode"} : Amended ToSubclass] uint8 EnableNetworkProtection,[In,Description("-��[ [�S�cnj�e>YX[�S
k] �R��0") : Amended ToSubclass,Values{"Disabled", "�]_U(u", "AuditMode", "BlockDiskModificationOnly", "AuditDiskModificationOnly"} : Amended ToSubclass] uint8 EnableControlledFolderAccess,[In,Description("Specify the exclusions for Attack Surface Reduction Rules(ASR).") : Amended ToSubclass] string AttackSurfaceReductionOnlyExclusions[],[In,Description("Specify Attack Surface Reduction Rule(ASR) Ids. The rule Ids need to be in the same order as their respective actions specified in the AttackSurfaceReductionRules_Actions property.") : Amended ToSubclass] string AttackSurfaceReductionRules_Ids[],[In,Description("Default actions for Attack Surface Reduction Rule(ASR). The actions need to be in the same order as their respective rule Ids specified in the AttackSurfaceReductionRules_Ids property.") : Amended ToSubclass,Values{"Disabled", "�]_U(u", "Audit Mode"} : Amended ToSubclass] uint8 AttackSurfaceReductionRules_Actions[],[In,Description("Add allowed applications to the Controlled folder access feature.") : Amended ToSubclass] string ControlledFolderAccessAllowedApplications[],[In,Description("Add protected folders to the Controlled folder access feature.") : Amended ToSubclass] string ControlledFolderAccessProtectedFolders[],[Description("Defines a file share for security intelligence in virtual environments.") : Amended ToSubclass,in] string SharedSignaturesPath,[In,Description("Configure whether low cpu priority should be used during scheduled scan.") : Amended ToSubclass] boolean EnableLowCpuPriority,[In,Description("Enables or disables file hash computation feature.") : Amended ToSubclass] boolean EnableFileHashComputation,[In,Description("dk Cmdlet �-�g\BlO(u��x��0�c�[ -Force�GR
NgTO(u�\Bl�-��x��0") : Amended ToSubclass] boolean Force);

  uint32 Remove([In,Description("AQ1��|q}�{t�Tf�x\P(u�j�g@b	gR�Q_�v�c�c0") : Amended ToSubclass] string ExclusionPath[],[In,Description("AQ1��|q}�{t�Tf�x\P(u�j�g@b	gR�QoR�j
T�v�c�c0") : Amended ToSubclass] string ExclusionExtension[],[In,Description("AQ1��|q}�{t�Tf�x\P(u�j�g@b	gR�QU�tz�^�v�c�c0") : Amended ToSubclass] string ExclusionProcess[],[In,Description("uP,n0RZ�Bf
N(WvQ
N�WL��-��R\O�vZ�X�%R�x0ThreatIDDefaultAction_Actions -N�v�R\O��^�_�� ThreatIDDefaultAction_Ids -N�vX�%R�x��^�vT") : Amended ToSubclass] sint64 ThreatIDDefaultAction_Ids[],[In,Description("
NfZ��v�-��R\O0") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] boolean UnknownThreatDefaultAction,[In,Description("NO�^�V͑'`Z��v�-��R\O0") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] boolean LowThreatDefaultAction,[In,Description("-N�^�V͑'`Z��v�-��R\O0") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] boolean ModerateThreatDefaultAction,[In,Description("ؚ�^�V͑'`Z��v�-��R\O0") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] boolean HighThreatDefaultAction,[In,Description("Default action for severe severity threats.") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] boolean SevereThreatDefaultAction,[In,Description("c�[�S;e�db�.~\��GR�v�cd���v0") : Amended ToSubclass] string AttackSurfaceReductionOnlyExclusions[],[In,Description("Specify Attack Surface Reduction Rule(ASR) Ids. The rule Ids need to be in the same order as their respective actions specified in the AttackSurfaceReductionRules_Actions property.") : Amended ToSubclass] string AttackSurfaceReductionRules_Ids[],[In,Description("Default actions for Attack Surface Reduction Rule(ASR). The actions need to be in the same order as their respective rule Ids specified in the AttackSurfaceReductionRules_Ids property.") : Amended ToSubclass,Values{"Disabled", "�]_U(u", "Audit Mode"} : Amended ToSubclass] uint8 AttackSurfaceReductionRules_Actions[],[In,Description("Add allowed applications to the Controlled folder access feature.") : Amended ToSubclass] string ControlledFolderAccessAllowedApplications[],[In,Description("Add protected folders to the Controlled folder access feature.") : Amended ToSubclass] string ControlledFolderAccessProtectedFolders[],[Description("Defines a file share for security intelligence in virtual environments.") : Amended ToSubclass,in] string SharedSignaturesPath,[In,Description("dk Cmdlet �-�g\BlO(u��x��0�c�[ -Force�GR
NgTO(u�\Bl�-��x��0") : Amended ToSubclass] boolean Force);

  uint32 Add([In,Description("AQ1��|q}�{t�Tf�x\P(u�j�g@b	gR�Q_�v�c�c0") : Amended ToSubclass] string ExclusionPath[],[In,Description("AQ1��|q}�{t�Tf�x\P(u�j�g@b	gR�QoR�j
T�v�c�c0") : Amended ToSubclass] string ExclusionExtension[],[In,Description("AQ1��|q}�{t�Tf�x\P(u�j�g@b	gR�QU�tz�^�v�c�c0") : Amended ToSubclass] string ExclusionProcess[],[In,Description("uP,n0RZ�Bf
N(WvQ
N�WL��-��R\O�vZ�X�%R�x0ThreatIDDefaultAction_Actions -N�v�R\O��^�_�� ThreatIDDefaultAction_Ids -N�vX�%R�x��^�vT") : Amended ToSubclass] sint64 ThreatIDDefaultAction_Ids[],[In,Description("uP,n0RZ�Bf
N(WvQ
N�WL��-��R\O�v�-��R\O0��N�R\O�v��^�_�� ThreatIDDefaultAction_Ids l\'`-Nc�[�v
\�aX�%R�x��^�vT0") : Amended ToSubclass,Values{"nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] uint8 ThreatIDDefaultAction_Actions[],[In,Description("c�[�S;e�db�.~\��GR�v�cd���v0") : Amended ToSubclass] string AttackSurfaceReductionOnlyExclusions[],[In,Description("Specify Attack Surface Reduction Rule(ASR) Ids. The rule Ids need to be in the same order as their respective actions specified in the AttackSurfaceReductionRules_Actions property.") : Amended ToSubclass] string AttackSurfaceReductionRules_Ids[],[In,Description("Default actions for Attack Surface Reduction Rule(ASR). The actions need to be in the same order as their respective rule Ids specified in the AttackSurfaceReductionRules_Ids property.") : Amended ToSubclass,Values{"Disabled", "�]_U(u", "Audit Mode"} : Amended ToSubclass] uint8 AttackSurfaceReductionRules_Actions[],[In,Description("Add allowed applications to the Controlled folder access feature.") : Amended ToSubclass] string ControlledFolderAccessAllowedApplications[],[In,Description("Add protected folders to the Controlled folder access feature.") : Amended ToSubclass] string ControlledFolderAccessProtectedFolders[],[Description("�[�[��d�t�X-N�O�[hQ�`1X�f�eO(u�v�jHhqQ(u@S0") : Amended ToSubclass,in] string SharedSignaturesPath,[In,Description("dk Cmdlet �-�g\BlO(u��x��0�c�[ -Force�GR
NgTO(u�\Bl�-��x��0") : Amended ToSubclass] boolean Force);

};



[Version("1.0") : Amended,Description("Microsoft Defender 2��kߎԚ�c�c^�%R") : Amended ToSubclass,AMENDMENT, LOCALE("MS_404")] 

class MSFT_MpScan

{

};



[Version("1.0") : Amended,Description("Microsoft Defender 2��kߎԚ=|�z^�%R") : Amended ToSubclass,AMENDMENT, LOCALE("MS_404")] 

class MSFT_MpSignature

{

};



[Description("dk�UN��vh�:y Microsoft �S�`az_�x
g�Ra�g�rKa") : Amended ToSubclass,AMENDMENT, LOCALE("MS_404")] 

class MSFT_MpThreat : BaseStatus

{

  [Description("P}�i�c�Hr,g") : Amended ToSubclass] string SchemaVersion;

  [Description("/UNuP,nX�%R�x") : Amended ToSubclass,key] sint64 ThreatID;

  [Description("Z��v
T1z") : Amended ToSubclass] string ThreatName;

  [Description("�V͑'`X�%R�x - R	�") : Amended ToSubclass,Values{"!q�l��X�", "NO", "-N", "ؚ", "Severe"} : Amended ToSubclass] uint8 SeverityID;

  [Description("Category ID - Enumeration") : Amended ToSubclass,Values{"INVALID", "ADWARE", "SPYWARE", "PASSWORDSTEALER", "TROJANDOWNLOADER", "WORM", "BACKDOOR", "REMOTEACCESSTROJAN", "TROJAN", "EMAILFLOODER", "KEYLOGGER", "DIALER", "MONITORINGSOFTWARE", "BROWSERMODIFIER", "COOKIE", "BROWSERPLUGIN", "AOLEXPLOIT", "NUKER", "SECURITYDISABLER", "JOKEPROGRAM", "HOSTILEACTIVEXCONTROL", "SOFTWAREBUNDLER", "STEALTHNOTIFIER", "SETTINGSMODIFIER", "TOOLBAR", "REMOTECONTROLSOFTWARE", "TROJANFTP", "POTENTIALUNWANTEDSOFTWARE", "ICQEXPLOIT", "TROJANTELNET", "FILESHARINGPROGRAM", "MALWARE_CREATION_TOOL", "REMOTE_CONTROL_SOFTWARE", "TOOL", "TROJAN_DENIALOFSERVICE", "TROJAN_DROPPER", "TROJAN_MASSMAILER", "TROJAN_MONITORINGSOFTWARE", "TROJAN_PROXYSERVER", "VIRUS", "�]�w", "
Nf", "SPP", "L��p", "1_ޞ", "�SGR"} : Amended ToSubclass] uint8 CategoryID;

  [Description("^��WX�%R�x - R	�") : Amended ToSubclass,Values{"�]�w�`a", "L��p", "!q�l��X�", "�]�w!q�`a", "NRI"} : Amended ToSubclass] uint8 TypeID;

  [Description("Threat Rollup Status") : Amended ToSubclass,BitValues{"ThreatClean", "RebootRequired", "OfflineScanRequired", "ManualStepsRequired", "FullScanRequired", "ReinfectionLoop", "�]�WL�"} : Amended ToSubclass] uint32 RollupStatus;

  [Description("�SZ�q_���vnj�nn�U") : Amended ToSubclass] string Resources[];

  [Description("c�[Z�/f&T�f�}�WL�") : Amended ToSubclass] boolean DidThreatExecute;

  [Description("c�[Z�/f&T\O(u-N") : Amended ToSubclass] boolean IsActive;

};



[Description("dk^�%Rh�:y�]��X�KNZ��v^�%R�v�") : Amended ToSubclass,AMENDMENT, LOCALE("MS_404")] 

class MSFT_MpThreatCatalog : BaseStatus

{

  [Description("/UNuP,nX�%R�x") : Amended ToSubclass,key] sint64 ThreatID;

  [Description("Z��v
T1z") : Amended ToSubclass] string ThreatName;

  [Description("�V͑'`X�%R�x - R	�") : Amended ToSubclass,Values{"!q�l��X�", "NO", "-N", "ؚ", "Severe"} : Amended ToSubclass] uint8 SeverityID;

  [Description("Category ID - Enumeration") : Amended ToSubclass,Values{"INVALID", "ADWARE", "SPYWARE", "PASSWORDSTEALER", "TROJANDOWNLOADER", "WORM", "BACKDOOR", "REMOTEACCESSTROJAN", "TROJAN", "EMAILFLOODER", "KEYLOGGER", "DIALER", "MONITORINGSOFTWARE", "BROWSERMODIFIER", "COOKIE", "BROWSERPLUGIN", "AOLEXPLOIT", "NUKER", "SECURITYDISABLER", "JOKEPROGRAM", "HOSTILEACTIVEXCONTROL", "SOFTWAREBUNDLER", "STEALTHNOTIFIER", "SETTINGSMODIFIER", "TOOLBAR", "REMOTECONTROLSOFTWARE", "TROJANFTP", "POTENTIALUNWANTEDSOFTWARE", "ICQEXPLOIT", "TROJANTELNET", "FILESHARINGPROGRAM", "MALWARE_CREATION_TOOL", "REMOTE_CONTROL_SOFTWARE", "TOOL", "TROJAN_DENIALOFSERVICE", "TROJAN_DROPPER", "TROJAN_MASSMAILER", "TROJAN_MONITORINGSOFTWARE", "TROJAN_PROXYSERVER", "VIRUS", "�]�w", "
Nf", "SPP", "L��p", "1_ޞ", "�SGR"} : Amended ToSubclass] uint8 CategoryID;

  [Description("^��WX�%R�x - R	�") : Amended ToSubclass,Values{"�]�w�`a", "L��p", "!q�l��X�", "�]�w!q�`a", "NRI"} : Amended ToSubclass] uint8 TypeID;

};



[Description("dk^�%Rh�:y�vMRs�0}�vZ��rKa") : Amended ToSubclass,AMENDMENT, LOCALE("MS_404")] 

class MSFT_MpThreatDetection : BaseStatus

{

  [Description("/UNuP,nX�%R�x") : Amended ToSubclass,key] string DetectionID;

  [Description("/UNZ�X�%R�x") : Amended ToSubclass,key] sint64 ThreatID;

  [Description("�vܕ�vU�tz�^
T1z") : Amended ToSubclass] string ProcessName;

  [Description("The user who requested remediation") : Amended ToSubclass] string DomainUser;

  [Description("Detection Source Type ID - Enumeration") : Amended ToSubclass,Values{"!q�l��X�", "O(u�", "�|q}", "sSBf", "IOAV", "NRI", "ELAM", "LocalAttestation", "RemoteAttestation"} : Amended ToSubclass] uint8 DetectionSourceTypeID;

  [Description("�SuP,nq_���vnj�nn�U") : Amended ToSubclass] string Resources[];

  [Description("��!kuP,n0RZ��vBf��") : Amended ToSubclass] datetime InitialDetectionTime;

  [Description("Z��rKa���f�vgяBf��") : Amended ToSubclass] datetime LastThreatStatusChangeTime;

  [Description("܈Qe�vBf��0") : Amended ToSubclass] datetime RemediationTime;

  [Description("�WL��rKaX�%R�x - R	�") : Amended ToSubclass,Values{"!q�l��X�", "Blocked", "Allowed", "ck(W�WL�", "NotExecuting"} : Amended ToSubclass] uint8 CurrentThreatExecutionStatusID;

  [Description("Z��rKaX�%R�x - R	�") : Amended ToSubclass,Values{"!q�l��X�", "�]uP,n", "�]nd�", "Quarantined", "Removed", "Allowed", "Blocked", "CleanFailed", "QuarantineFailed", "RemoveFailed", "AllowFailed", "�]>e�h", "BlockedFailed"} : Amended ToSubclass] uint8 ThreatStatusID;

  [Description("Z��rKa/����x") : Amended ToSubclass] sint32 ThreatStatusErrorCode;

  [Description("nd��R\O - R	�") : Amended ToSubclass,BitValues{"!q�l��X�", "nd�", "���", "Remove", "Allow", "UserDefined", "NoAction", "\��"} : Amended ToSubclass] uint8 CleaningActionID;

  [Description(""u�THr,g (;N���!k���D}�^��O�)") : Amended ToSubclass] string AMProductVersion;

  [Description("c�Qnd��R\O/f&Tb�R") : Amended ToSubclass] boolean ActionSuccess;

  [Description("�_��WL�M�Y�R\O�N�[b܈Qe - R	�") : Amended ToSubclass,Values{"None", "FullScanRequired", "RebootRequired", "FullScanAndRebootRequired", "ManualStepsRequired", "FullScanAndManualStepsRequired", "RebootAndManualStepsRequired", "FullScanAndRebootAndManualStepsRequired", "OfflineScanRequired", "FullScanAndOfflineScanRequired", "RebootAndOfflineScanRequired", "FullScanAndRebootAndOfflineScanRequired", "ManualStepsAndOfflineScanRequired", "FullScanAndManualStepsAndOfflineScanRequired", "RebootAndManualStepsAndOfflineScanRequired", "FullScanAndRebootAndManualStepsAndOfflineScanRequired"} : Amended ToSubclass] uint32 AdditionalActionsBitMask;

};



[Version("1.0") : Amended,Description("Microsoft Defender 2��kߎԚ WDO �c�c^�%R") : Amended ToSubclass,AMENDMENT, LOCALE("MS_404")] 

class MSFT_MpWDOScan

{

};