pgkt04/defender-control

Health v2 · maintenance only

Adoption not part of the score

2040 stars · 139 forks observed · 2026-09-25

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

An open-source Windows utility that permanently disables or re-enables Windows Defender by running as TrustedInstaller, setting disabling policies, and renaming Defender's driver and engine binaries. It ships as separate disable/enable executables and saves a restore list so the changes can be fully undone.

Use cases

• permanently disable windows defender on windows 10 or 11
• stop defender from quarantining my own tools
• re-enable windows defender after disabling it
• check whether defender real-time protection is running
• disable defender without booting into safe mode

When to choose

• you need Defender fully and persistently disabled on a Windows 10/11 machine you control
• you want an open-source, reversible alternative to manual registry edits or Safe Mode tricks
• you want a simple status check of Defender's engine from the command line

When to avoid

• you only need temporary real-time protection off - use Windows Security settings instead
• you cannot or should not turn off Tamper Protection
• you need an audited, enterprise-grade security configuration tool
• you are uncomfortable running unsigned binaries that Microsoft flags as HackTools

Facets

application · maturity active

security cli security windows developer-tools windows cli windows-defender antivirus-management trustedinstaller system-administration

Member repositories

For agents

markdown · JSON · MCP: product_card(name="pgkt04/defender-control")