It would not be ethical for me to share with you the exact details if I knew, however, the way that antimalware, such as Windows Defender, works, is by design an obscure process. The methods of detection change all the time and even if someone made a list to test all of these, it could change day-by-day, or even perhaps user-by-user, as they may not want a malware developer to know that they are "onto them", so the detection could actually be purposely hidden from someone that the software believes is attempting to develop malware. It is not as simple as merely checking if a function call sets off antimalware software, so I can't provide you a straight answer...because essentially nobody can!
spam fails_task lang_mismatch pii not_appropriate hate_speech sexual_content quality toxicity humor helpfulness creativity violence