windows-defender

Black Hat·39 min

• Black Hat
• Red Team
• Date: 2025
• Location: Black Hat

Camille Mougey

Industry experts analyze emerging threats surrounding Windows Defender - Demystifying and Bypassing ASR by Understanding the AV's Signatures.

Black Hat·49 min

• Black Hat
• Malware
• Date: 2025
• Location: Black Hat

Security researchers examine technical aspects of Windows Offender: Reverse Engineering Windows Defender's Antivirus Emulator.

Microsoft Security Response Center (MSRC)·53 min

• MICROSOFT
• Hardware
• Date: 2025
• Location: Microsoft

Engineers explore architecture and security mechanisms for BlueHat v17 || Securing Windows Defender Application Guard.

Recon Conference·1 hr 7 min

• RECON
• Recon
• Date: 2024
• Location: Recon

Presenters detail vulnerability discovery and exploitation in Recon 2018 - Reverse Engineering Windows Defender Part II.

Recon Conference·1 hr 6 min

• RECON
• Recon
• Date: 2024
• Location: Recon

Engineers explore architecture and security mechanisms for Recon 2018 Brussels - Reverse Engineering Windows Defender’s JavaScript Engine.

TROOPERS24·1 hr 1 min

• TROOPERS
• Blue Team
• Date: 2024
• Location: Troopers

Explores deep Dive into Windows Defender: Smart App Control and ETW and evaluates key implications for security practitioners.

Black Hat USA·39 min

• Black Hat
• Hardware
• Date: 2023
• Location: Black Hat

Omer Attias · Tomer Bar

Presenters detail vulnerability discovery and exploitation in Defender-Pretender: When Windows Defender Updates Become a Security Risk.

Main Stage·39 min

• DEF CON
• Malware
• Date: Aug 2023
• Location: Las Vegas

Omer Attias · Amit Bar

Discloses a zero-day vulnerability in Windows Defender signature updates, allowing unprivileged users to neutralize EDR protections and run malware fully undetected.

SteelCon·52 min

• STEELCON
• Community
• Date: 2022
• Location: Steelcon

Chris Truncer

2019: Built-In Appl. Whitelisting With Windows Defender Application Control.

Main Stage·23 min

• DEF CON
• Blue Team
• Date: May 2018
• Location: Beijing

Chuanda Ding

Chuanda Ding dissects the internal architecture of Windows 10 security mitigations and explains how advanced exploit techniques bypass Defender protections.

Main Track 1·47 min

• DEF CON
• Red Team
• Date: Aug 2017
• Location: Las Vegas

Chris Thompson

Evaluates Windows Defender ATP and Microsoft Advanced Threat Analytics detection mechanisms and presents tradecraft for red teams to evade behavioral telemetry.