Get-ScheduledTask -TaskPath '\Microsoft\Windows\Windows Defender\' -ErrorAction SilentlyContinue |

  ForEach-Object { Disable-ScheduledTask -InputObject $_; $_.TaskName }



'WinDefend','WdFilter','WdBoot','WdNisSvc','WdNisDrv' | ForEach-Object {

  '{0} = {1}' -f $_, (Get-ItemProperty "HKLM:\SYSTEM\CurrentControlSet\Services\$_").Start

}