Technique Search Instance

HTTP 200 OK
Allow: GET, PUT, PATCH, DELETE, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "id": 48,
    "key": "adding-antivirus-exception",
    "unprotect_id": "U0507",
    "name": "Adding antivirus exception",
    "description": "This technique involves searching for active antivirus-related processes or modules and terminating execution if any are found. By detecting loaded antivirus libraries, malware can determine whether it is running in a monitored environment and exit to avoid detection.",
    "windows": "",
    "linux": "",
    "macos": "",
    "resources": "https://www.darknet.org.uk/2016/12/malware-writers-using-exclusion-lists-to-linger/",
    "creation_date": "2019-03-18T13:21:38Z",
    "tags": "",
    "modification_date": "2025-02-20T16:55:17.960737Z",
    "category": [
        2
    ],
    "rules": [],
    "attachments": [],
    "featured_api": [],
    "contributors": [
        50
    ]
}