Issue: The Windows user is experiencing recurring alerts from Microsoft Defender, which is classifying SWIF as a malicious script/process/executable.

Routine Check Command: As part of routine checks, the command "WINDOWS_DEFENDER_EXCLUSION_CHECK" retrieves the currently added processes and paths in Defender from the device. If specific paths or processes are missing, it adds them and sends the updated configuration back to the device. This is done for all Windows devices.

For more details, see Windows Defender Auto Exclusion Rules.