OS Manuals

/opt/microsoft/mdatp/sbin/tvm_agent

Microsoft Defender for Endpoint

From mdatp 101.26052.0011-r5 (enterprise-packages), captured 2026-11-08 by running tvm_agent --help (exit 0). permalink

Usage: tvm_agent [OPTIONS] <COMMAND>

Commands:
  agent            Long living agent mode
  scanner          One time collection mode
  validate-config
  help             Print this message or the help of the given subcommand(s)

Options:
  -c, --config <CONFIG>
          File containing the configuration to use. if not supplied a default config will be used mutual exclusive with --base64-config
      --base64-config <BASE64_CONFIG>
          String containing the base64 value of a deflated config json string mutual exclusive with --config
  -o, --output-file <OUTPUT_FILE>
          The name of the output file
      --disable-startup-scan

      --client-fd <CLIENT_FD>
          Used with xplat sense client
      --server-fd <SERVER_FD>
          Used with xplat sense client
  -r, --role <ROLE>
          The role for this execution
      --dogfood
          Run in dogfood mode
      --logs-flush-interval <LOGS_FLUSH_INTERVAL>
          Flush logs cache interval. default: 60 seconds
      --stdin
          Accept configuration in stdin mode from sense
      --log-level <LOG_LEVEL>
          Print logs by minimum log level. default: warn for release, trace for debug
  -h, --help
          Print help
  -V, --version
          Print version
Options (13)
OptionDescriptionSource
-c, --config CONFIGFile containing the configuration to use.help
--base64-config BASE64_CONFIGString containing the base64 value of a deflated config json string mutual exclusive with --confighelp
-o, --output-file OUTPUT_FILEThe name of the output filehelp
--disable-startup-scanhelp
--client-fd CLIENT_FDUsed with xplat sense clienthelp
--server-fd SERVER_FDUsed with xplat sense clienthelp
-r, --role ROLEThe role for this executionhelp
--dogfoodRun in dogfood modehelp
--logs-flush-interval LOGS_FLUSH_INTERVALFlush logs cache interval.help
--stdinAccept configuration in stdin mode from sensehelp
--log-level LOG_LEVELPrint logs by minimum log level.help
-h, --helpPrint helphelp
-V, --versionPrint versionhelp

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.