This check gives a summary of the state of Windows Defender or System Center Endpoint Protection. It shows the status of all Windows Defender services (if they are enabled or disabled), checks if all signatures are up to date and if the last QuickScan was OK. You can define the levels for signature age and the last QuickScan age via a rule called -> Defender Signature and QuickScan age. Make sure, that the PowerShell cmdlet Get-MpComputerStatus is working (for Windows Defender) and Get-MProtComputerStatus for System Center Endpoint Protection!