Windows 10's built-in antivirus tool Microsoft Defender uses threat signatures, behavioral detection, and machine learning models to automatically detect and block suspicious files, folders, and ...

Microsoft details some of the ways Windows Defender ATP analyses files and software.