MpCmdRun.exe Undocumented Option

  • Thread starter Thread starter chrisb1
  • Start date Start date
C

chrisb1

Guest
Hello,


On some windows 10 workstation in our organization, I am seeing the following log entry:


"C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2008.9-0\MpCmdRun.exe" GetDeviceTicket -AccessKey <RANDOM_HEX_STRING>


I've been trying to find documentation on the GetDeviceTicket option, but can't seem to find anything. It is not an option presented in the mpcmdrun.exe command line help file.


Is anyone able to provide any information on this option? I'd just like to understand what this is.


Thank you for any help you can provide.


Regards,


Chris


More...
 
Back
Top