Disabling of Windows Defender

Danny Y@zendannyy

•updated Mar 31, 2026•2•0•96

Detects the use of PowerShell to disable various aspects of Microsoft Defender. This technique is commonly used by malware to evade detection before executing malicious payloads.