Microsoft Defender Core service - Do I need it, can I remove it or disable it?

Sqrly · May 24, 2024

I got a firewall popup for this and blocked it.

After researching some more I read in one post that Microsoft Defender Antivirus doesn't need this to work. It also seems to be what I classify as spyware as it collects a lot of data and sends it to M.$.

Information collected includes file data (file names, sizes, and hashes), process data (running processes, hashes), registry data, network connection data (host IPs and ports), and device details (device identifiers, names, and the operating system version).

Microsoft Defender Core service overview - Microsoft Defender for Endpoint

Microsoft Defender for Endpoint data storage and privacy - Microsoft Defender for Endpoint

Learn about how Microsoft Defender for Endpoint handles privacy and data that it collects.

learn.microsoft.com

I do not want to disable Microsoft Defender Antivirus but I like to prevent as much of M.$'s 'data collection' as I can. At this point I can't do anything to affect it but block it in the firewall.

TairikuOkami · May 24, 2024

Sqrly said:
It also seems to be what I classify as spyware as it collects a lot of data and sends it to M.$.

Microsoft Defender for Endpoint collects information from your configured devices and stores it in a customer-dedicated and segregated tenant specific to the service for administration, tracking, and reporting purposes.

Information collected includes file data (file names, sizes, and hashes), process data (running processes, hashes), registry data, network connection data (host IPs and ports), and device details (device identifiers, names, and the operating system version).

That is the problem when you hand pick only what you like or do not like.
It applies for Endpoint and collects those data for the network administrator.

Common users can choose what is sent: disable cloud, samples, smartscreen, etc.

DefenderUI

www.defenderui.com

NormanF · May 24, 2024

Its like any EDR. It collects data and sends it to the cloud to analyse so you can keep track of possible malware footholds on your PC.

Sqrly · May 24, 2024

Guys stop, please.

I did not ask for opinions on my question or software reccomendations.

Specifically, I just want to know if I can disable or remove "Microsoft Defender Core service" and if doing so would prevent "Microsoft Defender Antivirus" from working.

glasskuter · May 25, 2024

MS says"the Microsoft Defender Core service which will help with stability and performance of Microsoft Defender Antivirus"
It's a new service with very little info out there about what it does in the real world experience.
That statement would seem to me to say it's not necessary but beneficial to Defender, but it's in MS speak so one can read into it what they will.
I do not plan to disable mine but if I were to do so, I would disable it. I certainly wouldn't try to uninstall it.
I would not advise you one way or the other so do so at your own risk.

antspants · May 26, 2024

glasskuter said:
MS says"the Microsoft Defender Core service which will help with stability and performance of Microsoft Defender Antivirus"
It's a new service with very little info out there about what it does in the real world experience.
That statement would seem to me to say it's not necessary but beneficial to Defender, but it's in MS speak so one can read into it what they will.
I do not plan to disable mine but if I were to do so, I would disable it. I certainly wouldn't try to uninstall it.
I would not advise you one way or the other so do so at your own risk.

I agree. And I think there is nothing to be paranoid about.

Sqrly said:
I did not ask for opinions on my question or software reccomendations.

Nothing wrong with a bit of gratitude.

Marcus Vinicus · May 26, 2024

MS say to keep the Microsoft Defender Core Service running at all times. This is from the first URL posted by the OP.

This doesn't to apply to my PC as I use 3rd party AV/security software (Bitdefender Total Security) so Defender is disabled. The aforementioned service is not in my Windows install by default.

I'm not a fan of MS Defender AV software in Windows 11 so I don't use it.