Re: Probably the best "antivirus" you can have…
Why are you assuming an attacker didn't take 5 minutes to check his toolkit against AVs? There are even services to do this for you automatically. Hell, there are even services to fix any AV detections automatically...
Why are you assuming bugs in the AV (there are lots...) wasn't how he gained access in the first place?