MDE Toolkit

A free, powerful Windows application for monitoring and managing Microsoft Defender for Endpoint

✓ Free   ✓ No Account Required   ✓ Windows 10/11

Everything You Need to Monitor MDE

One tool to view, analyze, and manage your endpoint security configuration

🔍

Real-Time Status

Monitor Defender protection status, engine versions, and real-time protection state at a glance.

🛡️

App Control (WDAC)

View deployed WDAC policies, scan for policy files, and analyze application control configuration.

💾

Device Control

Manage USB and removable device policies. View, edit, and export device control configurations.

⚔️

ASR Rules

View Attack Surface Reduction rules status and configuration across your system.

🔥

Firewall Logs

Parse and analyze Windows Firewall logs with powerful filtering and search capabilities.

📊

Event Logs

View Defender events, threat detections, and security alerts from Windows Event Log.

🌐

Remote Support

Connect to remote machines via WinRM to monitor and diagnose MDE on other workstations.

Quick Actions

Common administrative tasks at your fingertips - update signatures, run scans, and more.

See It In Action

Modern WinUI 3 interface designed for Windows 11

Download MDE Toolkit

Free and open source. No account required.

Recommended
🏪

Microsoft Store

Automatic updates and easy installation

Get it from Microsoft Store

Coming soon to the Microsoft Store!

📦

Direct Download (MSIX)

Sideload the latest version manually

Download MSIX Package

Version 0.7

System Requirements

  • ✓ Windows 10 version 1809 or later / Windows 11
  • ✓ Supported architectures: x64, x86, ARM64
  • ✓ .NET 8 Desktop Runtime (included in MSIX)
  • ✓ Administrator privileges recommended for full features
📋 How to install MSIX package (sideloading)
  1. Enable Developer Mode: Go to Windows Settings → System → For Developers → Enable "Developer Mode"
  2. Download the MSIX package from the link above
  3. Right-click the downloaded .msix file and select "Properties"
  4. If there's an "Unblock" checkbox at the bottom, check it and click "Apply"
  5. Double-click the .msix file to open App Installer
  6. Click "Install" (if still greyed out, Developer Mode is not enabled)

Note: Developer Mode is required because this package is not signed with a Microsoft Store certificate.