Skip to content

Signature Update Interval should be 1-4 hours

Why This Matters

Stale signature definitions leave your endpoints vulnerable to newly discovered malware, ransomware, and zero-day exploits. Cyber attackers constantly release new variants, so antivirus signatures more than four hours old may fail to detect active threats. Keeping the update interval between one and four hours ensures your Microsoft Defender Antivirus can respond to the latest threat intelligence promptly.

What Aether365 Checks

This security check verifies that the signature update interval for Microsoft Defender Antivirus is set to a value between 1 and 4 hours. It appears in your Aether365 dashboard under the Defender checks category, flagged as a medium severity finding if the interval is too long.

Microsoft references

Was this page helpful?