The associated (often bundled or used alongside Defender Control) provides a streamlined way to manage what Defender ignores:
Use sigcheck.exe from Sysinternals: