Disable AV after you got admin/SYSTEM

1. cmd /c "C:\Program Files\Windows Defender\MpCmdRun.exe" -RemoveDefinitions -All

Sometimes disabling AV cannot work because Tamper Protection/registry settings are on then best way is to add exclusion to folder

1. Add-MpPreference -ExclusionPath "C:\Path\To\Folder"