In case you are prevented from unloading it, make sure anti-tampering is disabled:
mdatp config tamper-protection enforcement-level --value disabled
I think all this does is kill the tray app, the daemon is still running. I'm sure people have this installed by Intune, you can remove it for an hour, but it will get re-installed. This is the command: sudo '/Library/application Support/Microsoft/Defender/uninstall/uninstall'
Gérald Aubard
Thxs a lot!