detection.wiki

Microsoft-Windows-Windows Defender › Event 3007

Event ID 3007 — ProductName Real-time Protection feature has restarted.

Provider
Microsoft-Windows-Windows Defender
Channel
Operational

Description

ProductName Real-time Protection feature has restarted. It is recommended that you run a full system scan to detect any items that may have been missed while this agent was down.

Message #

%1 Real-time Protection feature has restarted. It is recommended that you run a full system scan to detect any items that may have been missed while this agent was down.
 	Feature: %3
 	Reason: %4

Fields #

NameDescription
ProductName UnicodeString—
ProductVersion UnicodeString—
FeatureName UnicodeString—
Reason UnicodeString—
Unused UnicodeString—
Unused2 UnicodeString—
FeatureID UnicodeString—

References #