Windows 10: Interpret windows defender mplog log files

I am trying to interpret windows defender mplog log files and I can't find any information or documentation online. I'd really like to understand the meaning of lowfi sigs and some of the other entries. Can you point me to some documentation on mplog log files? Thank you!

:)

 

Saves log files ?

You can either read the files in Windows or my preferred method is.....

Download CCcleaner from here...........

CCleaner Professional | Try the world’s most trusted PC cleaner, free!

You can then run cleaner, you will see the log files listed, then if you right click you can save as a text file and then have a read. You may also get an "error reporting" log listed seperatly.

 

windows defender is constantly writing to MPLog and MpWppTracing

Hi,

You can find the latest resources for developers in MSDN or
Microsoft Developer Network form where you can get suitable answers for your Windows Defender issue.

In line with this, it would be best that you post your query to the MSDN
Forums to get more suitable answers for your concern.

We're just a post away if you have further queries.

Regards.

 

Windows Defender on Server 2016: scan targets, scheduled scan and detailed logs of scans

Hi, I have these three questions:

1. What are the exact locations (paths, folders, subfolders, system files) scanned by Windows Defender Quick Scan on Microsoft Windows Server 2016?

(For example: C:\Users\AppData, C:\Windows\System32, boot sectors, memory, running processes, active TCP/IP etc... - I need a list of scan targets as complete as possible. Information that "it scans the most crucial and important files to your system" has
no value for me at all).

2. By what rule, task, or trigger the Windows Defender Scheduled Scan is running?

(In the Task Scheduler there is not defined the exact time at what the task will run. What does it mean the word "Idle" in this case? Does it mean that the task is running every time when user is not working on the computer? Or is it after 5+ minutes of
inactivity? Is it when CPU usage is below 10%, or does anybody know how it is working at all?)

3. Where - if somewhere at all - on the disk are located the scan logs created (if created) by Windows Defender?

(The real logs, no incomplete pseudo-logs from Event Viewer or MPLogs with useless information. I mean the logs, like logs created by any else anti-virus solution are: logs which contains a complete list of files checked during the scan, scan results, reasons,
time of the scan, type of the scan, rule which started the scan etc.)

Thank you very much for exact answers.