Create or edit a configuration profile with the following information:

Create or edit the following script and configure it to run when the check fails:

SELECT 1 from windows_security_center wsc CROSS JOIN windows_security_products wsp WHERE antivirus = 'Good' AND type = 'Antivirus' AND signatures_up_to_date=1;