Catch-up Full Scan should be disabled
Description
Verifies that catch-up full scan is disabled to avoid excessive system load when devices come back online.
How to fix
Navigate to Intune > Devices > Configuration > Settings Catalog > Microsoft Defender Antivirus > Scan. Ensure 'Disable Catchup Full Scan' is set to 'Enabled' (meaning catch-up is disabled).