
When a customer clicks a malware program, Windows Defender AV client will scan the file using on-box rules and definitions. The cloud protection service will return information whether the uploaded files are safe or malicious within milliseconds by using cloud-based machine learning models and Microsoft Intelligent Security Graph. Microsoft today highlighted that Windows Defender Antivirus client can detect and remove a never-before-seen malware in just 8 seconds by using cloud protection service. Whenever the Windows Defender Antivirus client detects suspicious files, it uploads them to the cloud protection service for rapid analysis. With the Windows 10 Creators Update which was released back in April, Microsoft delivered an updated Windows Defender Antivirus client which will take advantage of cloud protection service.
