Procession Tell me when it’s out

In the background

wdavdaemonMicrosoft Defender

○ Leave it

Antivirus from Microsoft, often installed by work.

What it is

Scans files for malware in real time.

Why it might be busy

During a scan or after an update. Usually a few minutes.

If you close it

Protection stops until it restarts. Leave it, or ask your IT team.

The verdict

○ Leave it. Part of macOS, or something that starts again by itself. You never need to close these.

In Activity Monitor

  • wdavdaemon
  • wdavdaemon_enterprise
  • wdavdaemon_unprivileged

From Procession’s guide, in the words the app shows.