Vulnerability & Exploit Database

Back to search

Windows Antivirus Exclusions Enumeration

This module will enumerate the file, directory, process and extension-based exclusions from supported AV products, which currently includes Microsoft Defender, Microsoft Security Essentials/Antimalware, and Symantec Endpoint Protection.

Free Metasploit Download

Get your copy of the world's leading penetration testing tool

 Download Now

Module Name



  • Andrew Smith
  • Jon Hart <jon_hart [at]>


  • windows



Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':

msf > use post/windows/gather/enum_av_excluded msf post(enum_av_excluded) > sessions ...sessions... msf post(enum_av_excluded) > set SESSION <session-id> msf post(enum_av_excluded) > show options and set options... msf post(enum_av_excluded) > run