Microsoft Defender Core service will be introduced for Windows Server 2012 R2 and 2016 to improve Defender Antivirus stability and performance. Public preview starts August 28, 2025; general availability by early October 2025. It installs by default with platform update 4.18.25060.7-0 and requires specific URL allowances and process whitelisting.
Applies to: Microsoft Defender XDR
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).