How to Clear Windows Security History in Windows 11
You clear Windows Security history in Windows 11 by manually deleting entries from the Protection history page within the Windows Security app.
Windows Security history, powered by firewall-in-windows-11/" class="sal-link" rel="noopener" target="_blank" data-sal-id="11776">Microsoft Defender Antivirus, logs detected malware, removed apps, and other system actions. These logs help you review past security events.
Windows 11 typically retains these logs for 15 days before automatically clearing them. Clearing the history manually allows you to remove outdated entries, keeping your dashboard clean and organized, especially after you’ve resolved the reported issues.
After completing the steps, your Protection history list will be empty. This action only affects the display of past events and does not alter your current security settings or protection status.
Prerequisites: Tamper Protection
Before you begin, you must disable Tamper Protection. If this is on, Windows will block you from deleting the Service folder. Note: This requires administrator privileges.
- Open the Windows Security app.
- Go to Virus & threat protection.
- Click Manage settings under Virus & threat protection settings.
- Toggle Tamper Protection to Off.
Method 1: Manual File Path Deletion
You can remove the logs by deleting the specific Service folder. Note: This requires administrator privileges.
- Open File Explorer by pressing Windows key + E.
- Copy and paste this path into the address bar:
C:\ProgramData\Microsoft\Windows Defender\Scans\History - Locate the Service folder.
- Right-click the Service folder and select Delete.
- Restart your computer to finish the process.
Method 2: PowerShell Automation
For advanced users, you can use PowerShell to clear the directory quickly. Note: This requires administrator privileges.
- Right-click the Start button and select Terminal (Admin) or PowerShell (Admin).
- Copy and paste the following command:
Remove-Item -Path "C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service\*" -Recurse -Force - Press Enter.
Summary
You can clear Windows Security history by disabling Tamper Protection and deleting the contents of the C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service folder. Whether you use File Explorer or PowerShell, ensure you have administrator privileges. Clearing these logs provides a clean slate for your security dashboard without impacting your PC’s safety.
Does clearing history affect actual security status?
No, clearing your protection history does not affect your computer’s security status. It only removes the visual logs of past events from the Windows Security app. Your active antivirus settings, real-time protection, and firewall rules remain fully functional and unchanged after you delete these log files.
Why does the history log reappear?
If your history logs reappear, it is likely because Microsoft Defender Antivirus is still actively monitoring your system. If a previous threat was not fully resolved or if the system detects a new event, it will generate a new log entry in the Service folder automatically.
Is it safe to delete the Service folder?
Yes, it is safe to delete the contents of the Service folder. Windows will automatically recreate the necessary directory structure once it needs to log a new security event. This is a standard maintenance task that does not harm your operating system or compromise your data protection.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!