Attackers know that adding a MDAV exclusion for their malicious binary is easier than disabling Defender entirely. Huntress covers how this overlooked technique works, and how to detect it.