Custom on-demand scan

[denn]

Trying to run a custom on demand scan on ENS 10.7

What does it mean "scan_ID" ? How to get it or how to create it ?

amcfg.exe /scan /task quick /filestoscan "exe" /targets "C:\Users\test\Downloads"

https://docs.mcafee.com/bundle/endpoint-security-10.7.x-threat-prevention-product-guide-windows/page...

[AdithyanT]

Hi @denn,

Thank you for your post. I am afraid amcfg.exe does not give you a way of creating a custom scan task but rather editing an existing one on the fly.

Hence you are expected to have a custom On Demand Scan present created using the client UI (since this is mostly implemented in unmanaged environment) and have the task ID used using CLI.

for example, After you create a custom on Demand Scan with a name Scan_task_1, please run the command to find it's corresponding Scan_ID:

amcfg.exe /scan /list

Now you can use this scan ID along with the given params to achieve your scan task!

[AdithyanT]

Hi @denn,

The attached screengrab is for your kind reference:

[AdithyanT]

Hi @denn,

Just to be clear, this is by design. we can confirm this from the below statement:

"With the custom on-demand scan command line interface, you can run a previously defined custom on‑demand scan with new settings, without changing the settings of the original custom scan."

Source: https://docs.mcafee.com/bundle/endpoint-security-10.7.x-threat-prevention-product-guide-windows/page...

[denn]

This command line scan implemented only on umanaged systems ? I am using ePO, but some engineers need command line scan, we have it in VirusScan.

https://kc.mcafee.com/corporate/index?page=content&id=KB75478

Is it possible to do the same with ENS 10.7 ?

[patrakshar]

The article KB75478 is for different product call VSCL. It is not VSE. The command line scan that mentioned by @AdithyanT  should help in triggering the ODS using ENS. If you are looking to trigger ODS on a machine without using the ENS on the machine then use the VCLS and follow the article. 

[denn]

I want to trigger Scan on ENS 10.7 localy on machine, without Client Task from ePO.

[patrakshar]

The commands mentioned in https://docs.mcafee.com/bundle/endpoint-security-10.7.x-threat-prevention-product-guide-windows/page... should be working for any un-manage/manage system. Is there any specific issues you are facing while running the ODS locally?

[patrakshar]

Additionally if you are asking a way to create Task using command line then that is not an option.  ENS 10.7 this is just a command line interface that allows us to run scans, updates etc from a command prompt.  it isn't a scanner like the standalone vse cls.   so there isn't a way to create a new ODS from the cli.  you have to have a custom scan created first or you can run the full/quick scan. 

By default we have given one Full Task and Custom Task so you can trigger those using CLI. 

[AdithyanT]

Hi @denn,

Thank you for your response. To be very precise, You can most certainly "Trigger" a scan with custom properties and what not, but it should be an already created Scan since you cannot create a new scan and run it but merely use an existing scan and run it when using these command line options!

This does not require any new tasks from ePO, The tasks can be created locally using the client UI but not using the command line!

I sincerely hope this clarifies your query.