Windows 10: Windows Security (Defender) and Protection history empty

Windows Defender keeps deleting/removing/quarantining files but there's no information what was removed. This has happened several different ways, but recently Action Center said something like 3 files removed by Windows Defender. Then I go to Windows Security (Virus & threat protection) and Protection history. And it's "No recent actions". How do I see the actual history as that place is always empty?

I have also Bitdefender Total Security 25.0.2.14 running (Win10 v2004). It does NOT have anything in quarantine either, so it seems Bitdefender did not intercept those files but just Windows Defender deletes files without warning and without any information except "3 files removed" or similar.

I also tried looking at Event Viewer / Applications and Services Logs / Microsoft / Windows / Windows Defender Antivirus / Operational, but there was not much there. Just information that scan started, no info on removed files.

How do I find out what's happening? Why is Protection history empty?

:)

 

Clearing Windows Defender history

Hey, what you need to do is so simple, just follow the steps below exactly in order:

1. Turn OFF Real-time Protection
2. Turn OFF Cloud-delivered Protection
3. Go to this folder C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service
4. Delete the contents in the folder
5. Turn ON Real-time Protection
6. Turn ON Cloud-delivered Protection

That's it... Now check protection History, it's empty.
Done!

 

Windows Security - Protection History

Whoa! Hold on... I see a couple of things wrong here at a few different levels.

Command line vs. GUI: Using PowerShell to change settings in Windows Security?

So you're telling me that there is no graphical way of "setting to block potentially unwanted apps" in "Windows Security"? Even though the message is coming right from the GUI of "Windows Security"? In other words, I have to use "PowerShell" to accomplish the
task? Fancy! Now, how many normal/regular Windows users know what PowerShell is or how to use it with confidence?...

@Micrsooft: Is this some inside joke that I'm not getting? If you as a programmer present such a message graphically in the context of "Windows Security" where you rant about some setting for "unwanted apps" being
turned off, then I expect you to graphically present the option to remedy that problem. Albeit there is a contextual "Actions" drop-down menu, but it has no "off" option as presented in the message, and there is no "on" option (as implicated by the message).
So even if these actionable commands so to speak do remedy the problem (I haven't actually tried it), this is not the way to interact or communicate well with the user. There needs to be an option to flip this setting
on or off right there in the GUI of "Windows Security", instead of issuing some PowerShell command in the background.

Truths about the state of things in Windows Security and Windows

Let's try to establish some truths about what is and what isn't true about Windows Security. I invite you to correct me if I'm wrong at any point.

• "setting to block potentially unwanted apps" is equal to "PUAProtection".
  
• "PUAProtection" is equal to "SmartScreen".
  
• "Microsoft Defender" is equal to "Windows Defender Security Center".
  
• "Windows Defender Security Center" is equal to "Windows Security".
  
• "PUAProtection" is disabled by default.
  
• "PUAProtection"/"SmartScreen" cannot be changed from within "Microsoft Defender"/"Windows Defender"/"Windows Security".

Windows Defender Security Center vs. Windows Security

Here are a couple of things that are not matching in my version of Windows 10 and "Windows Security" with the linked article on Windows Central and "Windows Defender Security Center". Today is 2019-12-06, and that article was published 2018-08-20.

• There is no "Threat history" under "Virus & threat protection". I can see why. It would seem redundant to say the same thing twice: "Threat history" and "Protection history". (Pun! Protection is history!)
• There are no "Quarantined threats" under "Virus & threat protection". This is now "Allowed threats". I can see why: "Allowed" is simple English.
  

 

Clear Windows Security Center (Defender) Protection History

You can use the Powershell command Get-MpPreference to get the status of Defender settings.

There are various Group Policy settings to control how Defender operates. This option lets you define when to clear the threat history.