Disable Defender Failure Detection

Summary

This compound condition will run the script Disable Defender Vs Supported AV and creates a ticket if it fails to disable Defender.

Details

• Name: Disable Defender Failure Detection
• Description: This compound condition will run the script "Disable Defender Vs Supported AV" and creates a ticket if it fails to disable Defender.
• Recommended Agent Policies: Windows Workstation Policy

Dependencies

• Solution - Disable Defender

Compound Condition Creation

• Compound Condition Configuration

Changelog

2026-06-17

• Initial version of the document