How to verify Defender exclusions

Copper Contributor

I have uses Performance Analyzer for Defender to try to solve a problem with performance issues with an application.

I have added the .exe file to Defender exclusion and verified it by running command: MpCmdRun.exe -CheckExclusion -path <path> with result <path> is excluded. Exit code is 0.


But when I run Performance Analyzer for Defender again, the file is still showing in the results with the highest "Duration".

I can also see the file in Process Mointor being "ReadFile" 16800 times from process MsMpEng.exe


Im not sure if the file is excluded correcly when MpCmdRun.exe is confirming this, but Performance Analyzer and Process Monitor is telling me the oposite. 


What is the correct way to verify Defender exclusions?

0 Replies