
Proof-of-concept demonstrating a vulnerability that disables Microsoft Defender (MsMpEng.exe) by locking a folder and rebooting, with screenshots showing process termination.
Add the folder to lock

Before reboot, the Defender process is still running

After reboot, the Defender process MsMpEng.exe is gone
