Managed AV - Where do the "Signature" versions come from?

You can view the full version number of Microsoft Defenders' definitions by using Windows Event Viewer and looking for EventID 1151 under at Applications and ServicesMicrosoftWindowsWindows DefenderOperational. EventID 1151 is Defender's hourly check and gives the log-winded version of everything.