” Antimalware Service Executable ” was using 250MB ran and 20% CPU even though we had deployed the Reg Key to disable realtime scanning e.g. below

Looks like the App has a party anyway with these scheduled Tasks

How to Disable Windows Defender properly
You can’t disable these Services , you have to do via Registry

Boot machine into Safe Mode
Change Reg Key Below
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend\Start = Dword 4
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisSvc\Start = Dword 4
