How to Access Protection History in Windows 11

Your computer uses built-in software called Microsoft Defender. It works in the background to keep your PC safe. This guide shows you how to see what it has been doing to protect you.

Why check Windows 11 Protection History?

Your computer uses Microsoft Defender to stay safe. It works in the background to stop viruses and bad software. Checking your Windows 11 Protection History helps you see what the system has blocked. It tells you if a file was moved to quarantine or if a program was stopped. This keeps your PC healthy and secure.

What happens when you are done?

After checking, you will know if your computer is safe. You will also know if you need to fix any security warnings. This keeps your system running fast and clean.

How to view your security history

You do not need special access to see these logs. Anyone using the computer can view them.

1. Click the search box on your taskbar.
2. Type Windows Security and click the app.

3. Click Virus & threat protection on the left.
4. Click Protection history.

You will see a list of recent actions. A red badge means a serious issue. A yellow badge means you should check it soon.

Managing Protection History logs

Sometimes the list gets too long or shows old threats. You can clear these logs manually.

[ADMIN PRIVILEGES REQUIRED]

1. Open File Explorer.
2. Navigate to C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service\DetectionHistory.
3. Delete all files inside this folder.

This clears the history shown in the Windows Security app. Note that the Windows Defender Service will create new logs as it finds new threats.

Understanding threat statuses

• Quarantined: The file is locked in a safe folder. It cannot run or harm your PC.
• Blocked: The threat was stopped before it could start.
• Remediation Incomplete: The system tried to fix the issue but needs your help. You may need to restart your PC.

Advanced settings and troubleshooting

If you cannot see your history, check if your Windows Defender Service is running. You can also use PowerShell to check status. Open PowerShell as an administrator and type Get-MpThreatDetection. This shows deep details about threats.

Make sure Tamper Protection is turned on in your settings. This prevents bad apps from changing your security rules. You can also use Controlled folder access to stop programs from changing your files without permission.

Summary

The Windows 11 Protection History is your main tool for tracking security. It shows you what Microsoft Defender has blocked or quarantined. By managing these logs and understanding the status of threats, you keep your computer safe. Always check your settings and use official Microsoft Support pages if you need more help.