I'm a bit worried that Windows Defender could have executed the malicious code contained on the Kali Linux. iso file, running another scan won't report any threats, but the history of the previous scan is still there. The button "run actions" does not clear the history. Here is a sample of threats that were found in the. I click the start recommended action button, but it seems to be stuck at the spinning wheel "removing threats". So, Windows Defender reported 329 threats found (mostly Metasploit payloads), certainly all from the Kali Linux image. We know that anti-virus softwares usually do not like such hacking tools and consider them as threats. Yesterday, Windows Defender decided to run a quick scan and went through the Kali Linux. I left the downloaded disc image (.iso) on my desktop. Last week, I downloaded Kali Linux from the official website for educational purpose.