Windows Defender Antivirus is a pretty robust security solution capable of protecting your device and data against viruses, spyware, rootkits, and other types of malware, and with Windows 10 version 1809 (Redstone 5), the default antivirus is getting even more powerful.
Starting with the Redstone 5 update, Windows Defender Antivirus is adding “Block suspicious behaviors,” which is a new feature (part of the Windows Defender Exploit Guard attack surface reduction technology) designed to detect and stop apps and files behaviors that might infect your device and data.
How to enable ‘Block suspicious behaviors’ on Windows 10
You can add another security layer to prevent suspicious behaviors from infecting your device using these steps:
Open Windows Security.
Click on Virus & threat protection.
Under “Virus & threat protection settings,” click the Manage settings link.
Turn on the Block suspicious behavior toggle switch.
Once you’ve completed the steps, the Windows Defender Antivirus will prevent certain behaviors by an app or file that might end up infecting your device and personal files.
If you don’t see this option, it’s because you’re not running a supported version of Windows 10. Block suspicious behaviors option appears in the Windows Security settings starting with Windows 10 version 1809 and later.
Update August 15, 2018: This feature has been removed from Windows 10, but it may return in the feature.