Why is Rider making wmic commands to get AntiVirus name?

I got flag on the company network for this command that Rider has ran a few times. Is this something I have configured wrong? Or is this intended by Rider? Why does it need AntiVirus software name?

1 comment

Hi Osklu002,

This is intended behavior. Rider uses wmic to check if Windows Defender is running and displays a warning about possible performance impact. Note that Rider will display this warning only if the user has sufficient permissions to alter the Win Defender exclusion list. You can refer to this article to learn more.

Let me know if you have any questions.


Please sign in to leave a comment.