You want to silently deploy Integrated Windows AV definitions for Security Essentials, Windows Defender, or System Center Endpoint Protection.
This can normally be done by downloading the executable file and adding the appropriate silent parameter to the package. In most cases this is -q.
In some rare cases, like definition 1.239.494.0 which came out March 31st, 2017, no silent parameters are needed. If you do use the standard -q parameter, you’re likely to get error code -2147023257 (translated 0x80070667 in hex) which maps to ERROR_INVALID_COMMAND_LINE.