Description

Exclusion Monitor (ExclusionMon) is a Windows Defender exclusion and setting modification monitor tool for Windows. It monitors event happening on Microsoft Windows Defender and logs them. This can be used for detecting malicious modifications in Windows Defender, as malware usually adds exclusions to the Windows Defender. It can also silently run on startup to catch all modifications. It can save those into the file, and you can review them at any time. It can also show realtime alerts, which means you can catch an unwanted change immediately.

Features

• List Windows Defender Exclusion and Setting Modifications
• Realtime alerts
• Compatible with Windows 7 and newer.
• Ability to export details
• Multi language support.
• Can be used for detecting malware & forensics.

File Verification & Safety

To make sure that the tool is downloaded properly, you can check the file SHA-256 hash.

Disclaimer: This free software is provided "as-is" without warranty of any kind, express or implied. The developer assumes no liability for data misplacement or system damage resulting from improper deployment or system anomalies this tool can cause.

Change Log

v1.0.1 - 08/08/2026: [*] Fixed false positive problems.

v1.0.0 - 06/08/2026: Initial release