Brief "Defender turned off" notification — logs show a normal service restart, is this expected? - Microsoft Q&A

A brief notification about Microsoft Defender being turned off was received, but the service restarted normally as indicated by logs and Windows Security.

“Hi everyone, I briefly saw a push notification saying Microsoft Defender was turned off. I opened Windows Security right after and Defender was on and working normally. I checked Event Viewer (Applications and Services Logs → Microsoft → Windows → Windows Defender → Operational) and found this sequence of events arou…”

View original article →

Security

threat_protection

Audience

adminend_user

Environment

cloudon_premises

Classification confidence: 85%

Loading correlations…