msiexec /i windowsdefender.msi /quiet /log install.log
installs, but not completely quietly--the UI pops at the end, and a
definition update cycle is initiated.
Having never done that, I can't speak for what is possible. I've tested the
commands I posted in the local cmd prompt environment, and they work--I
assume they would work in a script as well.