https://answers.microsoft.com/en-us/protect/forum/all/windows-10-pro-defender-stop-deleting-threats/418e68e0-4753-4de1-918c-67a8d1e3af5a
# Turn off Automatic Remediation:
> REG ADD "HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows Defender" /v DisableRoutinelyTakingAction /t REG_DWORD /d 1 /f
# Turn on Automatic Remediation:
> REG DELETE "HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows Defender" /v DisableRoutinelyTakingAction /f
# View value
PS> Get-ItemProperty -Path HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\
-Name VerboseStatus # view individual property
# Add verbose startup information
> REG ADD "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System" /v VerboseStatus /t REG_DWORD /d 1