# Help with Windows Defender false positives from Endpoint Protection

**URL:** <https://community.limacharlie.com/t/help-with-windows-defender-false-positives-from-endpoint-protection/347>\
**Category:** Community Exchange\
**Tags:** detection, windows\
**Created:** [June 9, 2025, 3:23pm UTC](https://community.limacharlie.com/t/help-with-windows-defender-false-positives-from-endpoint-protection/347 "2025-06-09T15:23:03Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![chadmando](https://yyz1.discourse-cdn.com/flex033/user_avatar/community.limacharlie.com/chadmando/32/92_2.png) [@chadmando](https://community.limacharlie.com/u/chadmando)\
**Post date:** [June 9, 2025, 3:23pm UTC](https://community.limacharlie.com/t/help-with-windows-defender-false-positives-from-endpoint-protection/347/1 "2025-06-09T15:23:03Z")

</div>

I turned on the Endpoint Protection extension and it is pretty noisy. Does anyone know of work that has been done to parse out the Settings Changes that are worthy of investigation versus UX, feature changes, scan state changes, etc.?

---

<div class="post-metadata">

**Author:** ![chadmando](https://yyz1.discourse-cdn.com/flex033/user_avatar/community.limacharlie.com/chadmando/32/92_2.png) [@chadmando](https://community.limacharlie.com/u/chadmando)\
**Post date:** [July 11, 2025, 6:11pm UTC](https://community.limacharlie.com/t/help-with-windows-defender-false-positives-from-endpoint-protection/347/2 "2025-07-11T18:11:28Z")

</div>

I haven’t found the definitive source on Windows Defender Operational Logs but I did find this site that helps parse through some scenarios worth investigating: [ETW - Windows Defender | artifacts.help](https://artefacts.help/windows_etw_windows_defender.html)