Docs menu

Shield and Microsoft Defender

See what Microsoft Defender reports in plain language, run Defender scans, audit exclusions and understand Hanki's experimental file scanner.

Shield explains what Microsoft Defender reports and gives you its scan controls in one place. Defender is your protection; Hanki is not an antivirus.

Shield Defender audit: protections reported as on, the security intelligence version and exclusions that need administrator access
Shield's Defender audit (preview 0.19.0-rc.3).

What's in Shield

TabUse it to
Defender auditRead protection status, security intelligence version and exclusions, including what Hanki can't see without administrator rights.
Defender controls / alertsRun a Defender quick or full scan, update definitions, cancel an active Defender scan and turn on opt-in protection alerts.
File scanner (experimental)Try Hanki's own scanner on a file or folder.
File scan historySee summaries of earlier file scans.

Working with Defender

Scans, definition updates and cancellation go through Defender itself, under your Windows settings. Some Defender commands need administrator approval. Defender can remediate threats under its own policy, and Hanki does not undo that. Defender communicates with Microsoft under its own configuration.

The experimental file scanner

Not a replacement for antivirus.

The file scanner has a bundled EICAR test signature and simple heuristics, not a maintained malware feed. It has no archive unpacking or real-time protection, and skips files over 512 MiB and reparse points. An empty result does not mean a file is safe.

Updated · Found something out of date? Report it on GitHub.