From a677632cfe1e6bebf39ca09b4d81ecca8c33d428 Mon Sep 17 00:00:00 2001
From: Allen Houchins <32207388+allenhouchins@users.noreply.github.com>
Date: Mon, 3 Feb 2025 14:20:18 -0600
Subject: [PATCH] Update antivirus-signatures-up-to-date.yml (#25990)

Update to fix policy logic.
---
 .../lib/windows/policies/antivirus-signatures-up-to-date.yml  | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/it-and-security/lib/windows/policies/antivirus-signatures-up-to-date.yml b/it-and-security/lib/windows/policies/antivirus-signatures-up-to-date.yml
index 89f2bc7972..5c2d80ad0c 100644
--- a/it-and-security/lib/windows/policies/antivirus-signatures-up-to-date.yml
+++ b/it-and-security/lib/windows/policies/antivirus-signatures-up-to-date.yml
@@ -1,7 +1,7 @@
 - name: Windows - Antivirus signatures up to date
-  query: SELECT 1 from windows_security_center wsc CROSS JOIN windows_security_products wsp WHERE antivirus = 'Good' AND type = 'Antivirus' AND signatures_up_to_date=1;
+  query: SELECT 1 FROM windows_security_products WHERE name LIKE '%Microsoft Defender Antivirus%' AND signatures_up_to_date = 1;
   critical: false
   description: Checks the status of antivirus and signature updates from the Windows Security Center.
-  resolution: "Run all available Windows updates."
+  resolution: Run all available Windows updates.
   platform: windows
   
\ No newline at end of file