How to Clear Windows Security History in Windows 11
This guide explains how to manually clear Windows Security history. The Protection history page in the Windows Security app shows what firewall-in-windows-11/" class="sal-link" rel="noopener" target="_blank" data-sal-id="11776">Microsoft Defender Antivirus has done. It tracks malware detection logs, removed apps, and system changes.
Why clear your history?
Windows keeps these logs for 15 days. Clearing them manually helps you clean up your logs if you have already fixed the reported issues and want a fresh start. It keeps your dashboard tidy.
What happens when you are done?
Once you finish these steps, the list of past security events in your Windows Security app will be empty. This does not change your actual security settings or protection status.
Prerequisites: Tamper Protection
Before you begin, you must disable Tamper Protection. If this is on, Windows will block you from deleting the Service folder. Note: This requires administrator privileges.
- Open the Windows Security app.
- Go to Virus & threat protection.
- Click Manage settings under Virus & threat protection settings.
- Toggle Tamper Protection to Off.
Method 1: Manual File Path Deletion
You can remove the logs by deleting the specific Service folder. Note: This requires administrator privileges.
- Open File Explorer by pressing Windows key + E.
- Copy and paste this path into the address bar:
C:\ProgramData\Microsoft\Windows Defender\Scans\History - Locate the Service folder.
- Right-click the Service folder and select Delete.
- Restart your computer to finish the process.
Method 2: PowerShell Automation
For advanced users, you can use PowerShell to clear the directory quickly. Note: This requires administrator privileges.
- Right-click the Start button and select Terminal (Admin) or PowerShell (Admin).
- Copy and paste the following command:
Remove-Item -Path "C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service\*" -Recurse -Force - Press Enter.
Summary
You can clear Windows Security history by disabling Tamper Protection and deleting the contents of the C:\ProgramData\Microsoft\Windows Defender\Scans\History\Service folder. Whether you use File Explorer or PowerShell, ensure you have administrator privileges. Clearing these logs provides a clean slate for your security dashboard without impacting your PC’s safety.
Does clearing history affect actual security status?
No, clearing your protection history does not affect your computer’s security status. It only removes the visual logs of past events from the Windows Security app. Your active antivirus settings, real-time protection, and firewall rules remain fully functional and unchanged after you delete these log files.
Why does the history log reappear?
If your history logs reappear, it is likely because Microsoft Defender Antivirus is still actively monitoring your system. If a previous threat was not fully resolved or if the system detects a new event, it will generate a new log entry in the Service folder automatically.
Is it safe to delete the Service folder?
Yes, it is safe to delete the contents of the Service folder. Windows will automatically recreate the necessary directory structure once it needs to log a new security event. This is a standard maintenance task that does not harm your operating system or compromise your data protection.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!