Configuring Tools and Settings in Windows Defender

You can choose what action Windows Defender takes (Recommended Action Based on Definitions, Remove, Quarantine, or Allow) when a specific alert level (Severe, High, Medium, or Low) is triggered. The Recommended Action Based on Definitions setting enables Windows Defender to take advantage of the latest data (definitions) about Internet threats to take the most appropriate action.