Windows 10’s integrated Windows Defender antivirus has some “cloud” features, like other modern antivirus applications. By default, Windows automatically uploads some suspicious-looking files and reports data about suspicious activity so new threats can be detected and blocked as quickly as possible.
Source: How-To Geek
