If you dont want to do any DISM or NTLite removals and keep a standard(ish) system but want to totally disable Windows Defender then this is the next best thing.
What this files does,
Delete Windows Defender Logon entry(see using Autoruns),
Stop Windows Defender services,
Stop Windows Defender driver loading,
Disable Windows Defender services,
Delete Windows Defender services,
Disable Windows Defender scheduled tasks,
Delete Windows Defender scheduled tasks,
Delete Windows Defender scheduled tasks folders,
Remove Windows Defender from control panel.
================================================
Delete Windows Defender Logon entry
Reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /f
Stop Windows Defender services
net stop WdNisSvc
net stop WinDefend
Stop Windows Defender driver loading
Reg.exe add "HKLM\SYSTEM\ControlSet001\services\WdNisDrv" /v "Start" /t REG_DWORD /d "4" /f
Disable Windows Defender services
Reg.exe add "HKLM\SYSTEM\ControlSet001\services\WdNisSvc" /v "Start" /t REG_DWORD /d "4" /f
Reg.exe add "HKLM\SYSTEM\ControlSet001\services\WinDefend" /v "Start" /t REG_DWORD /d "4" /f
Delete Windows Defender services
Reg.exe delete "HKLM\SYSTEM\ControlSet001\services\WdNisSvc" /f
Reg.exe delete "HKLM\SYSTEM\ControlSet001\services\WinDefend" /f
Disable Windows Defender scheduled tasks
schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance" /Disable
schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cleanup" /Disable
schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan" /Disable
schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Verification" /Disable
Delete Windows Defender scheduled tasks.
Reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Windows Defender" /f
Delete Windows Defender scheduled tasks folders
rd /s /q "C:\Windows\System32\Tasks\Microsoft\Windows\Windows Defender"
Remove Windows Defender from control panel.
Reg.exe delete "HKCR\CLSID\{D8559EB9-20C0-410E-BEDA-7ED416AECC2A}" /f
Reg.exe delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{D8559EB9-20C0-410E-BEDA-7ED416AECC2A}" /f