You should run a Microsoft Defender Offline scan when rootkits or other highly persistent malware are detected on your system by Windows Security. The app will then suggest you run an offline scan. Besides that, if you suspect that there is some undetected malware hiding on your PC, it is best to run the Microsoft Defender Offline scan.