Search notes:

Microsoft Defender

Microsoft Defender was referred to as
… but this Superuser answer argues that Windows Defender is different from Microsoft Defender.

TODO

cmd.exe: 
start ms-settings:windowsdefender
PowerShell: 
get-command -module defender
get-mpComputerStatus

get-winevent 'microsoft-windows-windows defender/operational'
get-winevent 'microsoft-windows-windows defender/operational' | where-object id -eq 1116

See also

C:\Program Files\Windows Defender
C:\ProgramData\Microsoft\Windows Defender\Platform\v.vv.vvvv.v-v
%ALLUSERSPROFILE%\Microsoft\Windows Defender
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
Antimalware Scan Interface (AMSI)
MRT.exe

Index