Technical Tip: Scan folder with FortiEDR AntiVirus scanner

Description

This article describes how to execute a FortiEDR AntiVirus scan locally and get the results.

Scope

FortiEDR version 5 and above.

Solution

Execute the following steps:

1. Copy the following files/folder to some directory:

• \Program Files\Fortinet\FortiEDR\FortiEDRAvScanner.exe.

• \Program Files\Fortinet\FortiEDR\libav.dll.

• \ProgramData\FortiEDR\Config\Collector\Signatures.

2. Execute the following command in cmd.exe with elevated privileges:

FortiEDRAvScanner.exe -d "<path>" -s Signatures --output <log>

 Where:

• <path> is the path to the folder to be scanned.

• <log> is the path for the scan result log.

3. Check the specified log path for results:

Note: If any error message appears after using the above procedure, open a ticket with Fortinet TAC and ask for Support to check the situation; refer to: Technical Tip: How to create a ticket for Fortinet TAC.

Related article:
Technical Tip: FortiEDR: EICAR test file detection