The use of this information about the latest versions of the Defender for Endpoint engine and signatures depends on your corporate policy. Print(get_max_2_days_ago_sifnature_version()) Print(signature_version + ' - ' + release_date)īy analyzing this mapping, you can, for example, get the maximum version that was 2 days ago, and assume that all versions more than it are normal, and those that are less than it are outdated. Release_date = get_release_date(signature_version) Top_20_signature_versions = get_top_20_signature_versions()įor signature_version in top_20_signature_versions: With a GET request, I get a list of these versions and then make separate requests to get the dates for them. The page has a drop-down list of all available versions. What can be done? We can get a “signature version -> the release date” mapping and select the versions that work for us. Signatures are updated several times a day, and requiring all hosts to have the latest version of signatures at any given time is simply impractical. The one latest version may be enough for the Defender engine, because it doesn’t change very often. There is such a page antimalware-definition-release-notes. Now let’s look at the signature versions.

As a result, we get the version of the Microsoft Defender for Endpoint antivirus engine, which can be compared with the versions of the engine installed on the hosts. In fact, this is just one GET request and parsing of the html-page. Vers = re.findall('Engine Version: ([^', response.text) Response = requests.get('', headers=headers) 'Accept': 'text/html,application/xhtml+xml,application/xml q=0.9,image/webp,*/* q=0.8', It can be obtained using a simple function: import requests You can see the engine version on the defenderupdates page. If you know something better, please write in the comments. I parse public html pages on the Microsoft site I’ll show you how I do it. Find lists of user agent strings from browsers, crawlers, spiders, bots, validators and others. Get an analysis of your or any other user agent string.

I haven’t found any pretty solution for this. Understand what information is contained in a user agent string.

Current version of firefox for windows