Getting started with the research
The number of files and components that make up antivirus software can reach the hundreds, with each file being proficient in a different antivirus model. For example, a particular process is responsible for monitoring files within the operating system, while another is responsible for static file scanning, another process can run the antivirus service on the operating system, and so on.
Choosing the right files and components for investigative purposes is critical, as all research takes time. We do not want to waste our time researching a file or component that is irrelevant for bypassing antivirus software.
That is why, before we conduct the research itself, we have to gather research leads and assign them a particular priority. For example, consider how much time and resources to invest in each lead.
Additionally, it is important to understand that most antivirus software has a self-protection mechanism. Its goal is to make it difficult...