Safety Scanner only scans when manually triggered and is available for use 10 days after being downloaded. The security intelligence update version of the Microsoft Safety Scanner matches the version described in this web page. To learn more, see 2019 SHA-2 Code Signing Support requirement for Windows and WSUS. Your devices must be updated to support SHA-2 in order to run Safety Scanner. Starting November 2019, Safety Scanner will be SHA-2 signed exclusively.