title: How Can I Tell If Microsoft Defender Has Scanned A Blob (a blob with no virus)
body: <p>I'm looking into using Microsoft Defender for Cloud to use with <a href="https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-introduction" rel="nofollow noreferrer">Blob Storage</a>.</p>
  <p>Ideally I'd like to:</p>
  <ol>
  <li>Upload to Storage</li>
  <li>Have Defender for cloud scan for viruses</li>
  <li>If there's an issue, remove it</li>
  <li>If there's NOT an issue, process it further.</li>
  </ol>
  <p>Step 3 is easy. <a href="https://docs.microsoft.com/en-us/azure/defender-for-cloud/workflow-automation" rel="nofollow noreferrer">Workflow automation</a> and can easily trigger such events.</p>
  <p>The bit I can't work out is: what if the scan goes through fine?</p>
  <p>I've looked in Logic Apps and can't find a 'successfully scanned' trigger.</p>
  <p><a href="https://i.stack.imgur.com/J1WHi.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/J1WHi.png" alt="logic app view for defender events" /></a></p>
  <p>When will the scan occur? As soon as uploaded, or just on a schedule?</p>
  <p>Is there anything I can go on (metadata?) to know a blob has been scanned and is good to go?</p>