← Back to LiveConnect catalog
LiveConnect · Security & Health

AEGIS

Microsoft Defender posture assessment.

Reads Defender state, threat history, recent detections, registered third-party AV, service health, and Defender Operational events from the last N days. Event window and signature-age thresholds are passed as parameters. Read-only. The counterpart to PALADIN.

Quick Launch

Run AEGIS

Paste into a Kaseya VSA LiveConnect PowerShell terminal. Downloads aegis.ps1 from CursedTechnocrat/TechnicianToolkit-LiveConnect and executes it with defaults. Append parameters after & $f — see the script header for available switches.

Set-ExecutionPolicy Bypass -Scope Process -Force; $f="$env:TEMP\aegis.ps1"; irm https://raw.githubusercontent.com/CursedTechnocrat/TechnicianToolkit-LiveConnect/main/aegis.ps1 -OutFile $f; & $f
Category
Security & Health
Script
aegis.ps1
Tags
defender, antivirus