How to Update Microsoft Defender and Run a Quick Scan in One Go

The Microsoft Defender command-line utility MpCmdRun.exe is mostly used to schedule scans and update the definitions. The MpCmdRun.exe command usage info can be obtained by running MpCmdRun.exe with “/?” or without any parameter.

However, it doesn’t mention a useful switch that updates Defender signatures and runs a Quick Scan at once.

MpCmdRun.exe — Signature Update & Quick Scan

To update the definitions and run a Quick Scan in one go, use the switch SignatureUpdateAndQuickScan

"C:\Program Files\Windows Defender\MpCmdRun.exe" /SignatureUpdateAndQuickScan

… and the event (1001) is written to Microsoft-Windows-Windows Defender/Operational event log.

---

Other MpCmdRun.exe command-line switches

Here are the other commonly used MpCmdRun.exe command-line switches:

Run a Quick Scan

"C:\Program Files\Windows Defender\MpCmdRun.exe" -Scan -ScanType 1

Run a Full Scan

"C:\Program Files\Windows Defender\MpCmdRun.exe" -Scan -ScanType 2

Update the Definitions

"C:\Program Files\Windows Defender\MpCmdRun.exe" -SignatureUpdate

To see the complete list of arguments, open a Command Prompt window and type:

"C:\Program Files\Windows Defender\MpCmdRun.exe"