Is it possible to configure Defender so that is not running all the time,
but can be used for on-demand scanning?