Rest guides
Windows Defender and Xeno — exclusion, not a kill-switch
xeno-executor.rest tells you to exclude one folder. Turning off real-time protection is the wrong lesson.
Safe exclusion path
- Extract Xeno to a folder you control (Documents\Xeno-rest or similar).
- Windows Security → Virus & threat protection → Exclusions → Add folder.
- Point at that folder only. Not the whole disk.
- Restore the file if it was quarantined, then launch from the excluded path.
Why it flags
Inject tools look like malware to heuristics. Official ZIP from this host still needs an exclusion. Fake mirrors need a delete.
Questions on this host
Disable antivirus forever?
No. One folder. Leave the rest of Defender on.
Third-party AV?
Add the same folder there. Still do not disable the product.
SmartScreen vs Defender?
Different prompts. Exclusion is Defender; SmartScreen is the first-run warning.
Xeno.rest