Av Evasion Disabling Windows Defender

Notes from oscp.adot8.com — post exploitation.

#post exploitation#adot8

source · oscp.adot8.com · post-exploitation/av-evasion_disabling-windows-defender ↗

Disabling Windows Defender

code

01Set-MpPreference -DisableRealtimeMonitoring $true -DisableScriptScanning $true -DisableBehaviorMonitoring $true -DisableIOAVProtection $true -DisableIntrusionPreventionSystem $true

code

01Set-MpPreference -DisableRealtimeMonitoring $false -DisableScriptScanning $false -DisableBehaviorMonitoring $false -DisableIOAVProtection $false -DisableIntrusionPreventionSystem $false