How to Clear Windows Security History in Windows 11
Clearing Windows Security history in Windows 11 removes past threat detections and actions from your PC’s security log.
Windows Security history is a record from Microsoft Defender Antivirus that shows what threats it found and what it did about them. It helps you see past security events.
By default, Windows 11 keeps these history entries for about 15 days before removing them. Manually clearing the history gives you a fresh look at your security dashboard, especially after fixing any problems.
Once you clear it, the Protection history list in Windows Security will be blank. This only hides past events and does not change your current security protection.
Disable Tamper Protection in Windows Security, then delete the Service folder located at 📁C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service. Restart your computer to complete the process.
Prerequisites: Tamper Protection
You need to turn off Tamper Protection (a security feature that prevents unauthorized changes) before you can clear Windows Security history, as this setting stops changes to your security options.
- Open the Windows Security app.
- Go to Virus & threat protection.
- Click Manage settings under Virus & threat protection settings.
- Toggle Tamper Protection to Off.
Method 1Manual File Path Deletion
You can clear your Windows Security history by manually deleting the folder where your scan records are stored using File Explorer. This method requires finding the correct folder and removing it to erase past scan details.
- Open File Explorer by pressing Windows key + E.
- Copy and paste this path into the address bar:
C:\ProgramData\Microsoft\Windows Defender\Scans\History - Locate the Service folder.
- Right-click the Service folder and select Delete.
- Restart your computer to finish the process.
Method 2PowerShell Automation
Clearing Windows Security history with PowerShell is a fast way to automatically remove all past scan files if you’re comfortable with command-line interfaces. A single command deletes the history, making this method efficient for users comfortable with running admin commands.
- Right-click the Start button and select Terminal (Admin) or PowerShell (Admin).
- Copy and paste the following command:
Remove-Item -Path "C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service\*" -Recurse -Force - Press Enter.
Summary
Clearing your Windows Security history involves a few steps. First, turn off Tamper Protection. Then, delete the files in the Service folder using either File Explorer or a PowerShell command. This provides a fresh look at your security dashboard without compromising your PC’s safety.
Does clearing history affect actual security status?
No, clearing your protection history does not affect your computer’s security status. It only removes the visual logs of past events from the Windows Security app. Your active antivirus settings, real-time protection, and firewall rules remain fully functional and unchanged after you delete these log files.
Why does the history log reappear?
If your history logs reappear, it is likely because Microsoft Defender Antivirus is still actively monitoring your system. If a previous threat was not fully resolved or if the system detects a new event, it will generate a new log entry in the Service folder automatically.
Is it safe to delete the Service folder?
Yes, it is safe to delete the contents of the Service folder. Windows will automatically recreate the necessary directory structure once it needs to log a new security event. This is a standard maintenance task that does not harm your operating system or compromise your data protection.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!