> For the complete documentation index, see [llms.txt](https://viperone.gitbook.io/pentest-everything/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/defense-evasion.md).

# Defense Evasion

- [Disable and Bypass Defender](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/defense-evasion/disable-defender.md)
- [Impair Defenses](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/defense-evasion/impair-defenses.md): https://attack.mitre.org/techniques/T1562/
- [Disable Windows Event Logging](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/defense-evasion/impair-defenses/disable-windows-event-logging.md): https://attack.mitre.org/techniques/T1562/002/
- [Impair Command History Logging](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/defense-evasion/impair-defenses/impair-command-history-logging.md): https://attack.mitre.org/techniques/T1562/003/
- [Disable or Modify System Firewall](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/defense-evasion/impair-defenses/disable-or-modify-system-firewall.md): https://attack.mitre.org/techniques/T1562/004/
- [Indicator Removal](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/defense-evasion/indicator-removal.md): https://attack.mitre.org/techniques/T1070/
- [Clear Windows Event Logs](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/defense-evasion/indicator-removal/clear-windows-event-logs.md): https://attack.mitre.org/techniques/T1070/001/
- [Clear Command History](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/defense-evasion/indicator-removal/clear-command-history.md): https://attack.mitre.org/techniques/T1070/003/
- [File Deletion](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/defense-evasion/indicator-removal/file-deletion.md): https://attack.mitre.org/techniques/T1070/004/
- [Network Share Connection Removal](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/defense-evasion/indicator-removal/network-share-connection-removal.md): https://attack.mitre.org/techniques/T1070/005/
- [Timestomp](https://viperone.gitbook.io/pentest-everything/everything/everything-active-directory/defense-evasion/indicator-removal/timestomp.md): https://attack.mitre.org/techniques/T1070/006/
