Specify the 'Define the number of days before virus definitions are considered out of date' (Threshold days for AVSignatureDue Min:0 Max:4294967295) This policy setting allows you to define the number of days that must pass before virus definitions are considered out of date. If definitions are determined to be out of date, this state may trigger several additional actions, including falling back to an alternative update source or displaying a warning icon in the user interface. By default, this value is set to 14 days. If you enable this setting, virus definitions will be considered out of date after the number of days specified have passed without an update. If you disable or do not configure this setting, virus definitions will be considered out of date after the default number of days have passed without an update. Counter Measure: Configure this setting depending on your organization's requirements. Potential Impact: More frequent virus definition updates impacts performance.

(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Defender\Signature Updates\Define the number of days before virus definitions are considered out of date (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Signature Updates\AVSignatureDue