Check if Defender Active
windowschecklist
Walkthrough
Determine whether Windows Defender is enabled and how it is configured before dropping tools. This guides whether you need obfuscation or AMSI bypass for your payloads.
Commands
cmd
reg query "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender"