Skip to content

Defendnot

According to its author, defendnot uses an undocumented Windows Security Center (WSC) API that is meant for antivirus software to notify Defender of their presence, with the goal of getting Defender to disable itself.

C2 Infrastructure

Hosting/VPS 100%

Last 7 days

Jul 1, 2026
C2 Hosts: 1

Further Reading