This policy setting configures the time in minutes before a detection in the additional action state moves to the cleared state. Counter Measure: Configure this setting depending on your organizations requirements. Potential Impact: Reducing the time in minutes before a detection in the additional action state is moved to the cleared state can impact performance. Fix: (1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Defender\Reporting\Configure time out for detections requiring additional action (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Reporting!AdditionalActionTimeout