Skip to content

Releases: SysAdminDoc/DisableDefender

v0.0.4 - Premium GUI

20 Apr 18:23
@SysAdminDoc SysAdminDoc
v0.0.4
2bddc91

Choose a tag to compare

View all tags
v0.0.4 - Premium GUI Latest
Latest

First public release.

Highlights

  • Three modes: Disable (reversible), Remove (aggressive), Restore (undo)
  • Firewall explicitly preserved (mpssvc, BFE, per-profile state verified pre/post)
  • Registry ACL takeover via SeTakeOwnershipPrivilege + SYSTEM-via-task fallback (no TrustedInstaller — privacy.sexy #264 documented it triggers Defender alarms)
  • 17 Defender services targeted, 10+ policy roots, SecHealthUI deprovision, SafeBoot\WinDefend trap
  • Premium WPF GUI (Catppuccin Mocha) with live status tiles, async worker runspace, streaming log, toast notifications

Files

  • DisableDefender.ps1 — single-file core (CLI + library)
  • DisableDefender.GUI.ps1 — WPF GUI wrapper
  • DisableDefender.GUI.bat — double-click launcher

Requirements

  • Windows 10 (1809+) or Windows 11 (any build, 24H2/25H2 supported)
  • PowerShell 5.1+, Administrator rights (auto-elevates)
  • Tamper Protection OFF — toggle in Windows Security first. No scripted bypass exists on 24H2+.

See CHANGELOG for the full list.

Assets 5
Loading