Reverse, Reveal, Recover: Windows Defender Quarantine Forensics
Fox IT
DECEMBER 13, 2023
The most extensive documentation we could find on the structures of Windows Defender quarantine files was Florian Bauchs’ whitepaper analyzing antivirus software quarantine files , but we also looked at several scripts on GitHub. We noted earlier that the QuarantineEntry contains three RC4-encrypted chunks.
129 
Let's personalize your content