| DisplayName | Description | ID | Type | Isolation | Accessibility | RunAs |
| Event Data Source | Data source for Windows Defender Events | Microsoft.WindowsDefender.ProtectedServer.AMEngineEventDSType | DataSourceModuleType | Any | Internal | |
| AntimalwareDefinitions Data Source | Data source for AntimalwareDefinitions | Microsoft.WindowsDefender.ProtectedServer.AntimalwareDefinitionsEventDSType | DataSourceModuleType | Any | Internal | |
| Server Protection Event Data Source | AntimalwareScan Event Data Source | Microsoft.WindowsDefender.ProtectedServer.AntimalwareScanEventDSType | DataSourceModuleType | Any | Internal | |
| Protected Endpoint Data Source | Protected Endpoint Data Source | Microsoft.WindowsDefender.ProtectedServer.DS | DataSourceModuleType | Any | Public | |
| MalwareActivity Data Source | Event data source for malware monitoring | Microsoft.WindowsDefender.ProtectedServer.MalwareActivity.MalwareActivityEventsWithAdditionalInfoDSType | DataSourceModuleType | Any | Internal | |
| RTP Event Data Source | Data source for RTP events | Microsoft.WindowsDefender.ProtectedServer.RTPEventDSType | DataSourceModuleType | Any | Internal | |
| Protected Candidate Data Source | Data source for ProtectedServerCandidate class | Microsoft.WindowsDefender.ProtectedServerCandidate.DS | DataSourceModuleType | Any | Public | |
| Unprotected Endpoint Data Source | Data source for UnprotectedServer class | Microsoft.WindowsDefender.UnprotectedServer.DS | DataSourceModuleType | Any | Public | |