All Huntress Blog Posts

All Huntress Blog Posts

All things cybersecurity engaging and accessible - so you can stay ahead of hackers and boost your cybersecurity savviness.

Author: Greg Ake
Threat Research
defendnot? Defend YES! Detecting Malicious Security Product Bypass Techniques
defendnot? Defend YES! Detecting Malicious Security Product Bypass Techniques

A tool called 'defendnot' disables Windows Defender by registering a fake antivirus through undocumented Windows Security Center APIs. Huntress covers the technique and how to detect it.