Microsoft

Microsoft Defender Antivirus is the built-in anti-malware solution for Windows that provides real-time protection, cloud-delivered protection, and behaviour monitoring against viruses, malware, spyware, and other threats. It is included with Windows and managed through Microsoft Endpoint Manager or Group Policy. 

Defender Antivirus generates detailed event logs covering threat detections, scan results, real-time protection actions, signature updates, and remediation activities. These events provide baseline endpoint security visibility across Windows environments, complementing EDR telemetry with traditional anti-malware detection data.