Someone's just published a very nice BYOVD exploit and I'm amazed I never heard more about this sort of thing.
https://github.com/andreisss/KslDump
KslDump — Why bring your own knife when Defender already left one in the kitchen? - andreisss/KslDump