Learn how to validate ASR posture using Defender TVM, registry-based policy evidence, and local PowerShell checks, and understand why these sources do not always match the Defender portal UI.