What is Real-Time Protection and how does it help protect me?

Real-Time Protection monitors critical checkpoints in Windows. These checkpoints are triggered when programs make changes to your Windows configuration. These changes can occur when you install software on your computer, or they can occur when spyware or other potentially unwanted software attempts to install on your computer.

If the Real-Time Protection system detects a change in any checkpoint, Windows Defender alerts you and provides the option for you to allow or block the change. In some cases—for example, when you install software—you can choose to allow the change in order to continue the installation process.

To configure the Real-Time Protection system, on the Tools menu, click Options. Scroll down to Real-Time Protection options section to view options to activate or deactivate the Real-Time Protection system.