HIP Check - Windows Intune Defender Protection

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

HIP Check - Windows Intune Defender Protection

L0 Member

We are managing some test devices in intune and we want update our HIP checks to look for Microsoft Intune Endpoint Detection on devices. 

 

Any recommendation on setting up that HIP object to look for intune being present on devices?

 

#globalprotect #hip

1 REPLY 1

L2 Linker

You would look for a custom process using something like this method:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oMQuCAM

 

If you just want to check that it is installed you could look for a registry key, but technically that would be easy to add in manually without the application being truly installed (or if an uninstaller didn't clean up properly, it could still match despite the application being uninstalled).

 

There is some more detail here:

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-web-interface-help/globalprotect/network-globalp...

  • 1783 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!