Full Scan Removable Drives should be enabled
Description
Verifies that full scans include removable drives (USB) to mitigate USB-based threats.
How to fix
Navigate to Intune > Devices > Configuration > Settings Catalog > Microsoft Defender Antivirus > Scan. Ensure 'Allow Full Scan Removable Drive Scanning' is set to 'Allowed'.