Skip to content

Commit

Permalink
Fix disabling of Microsoft Defender $170
Browse files Browse the repository at this point in the history
- Change naming from Windows Defender to Microsoft Defender to match
  latest branding.
- Add more extensive documentation.
- Add more scripts extending ways to disable Defender.
- Disable "Windows Security Center Service"
- Add missing `SetMpPreference` commands
- New disabling:
  - Disabling of Windows features related to Defender.
  - Disable Antimalware Scan Interface (AMSI)

TODO: Soft delete Defender directories, like
`$env:programdata\Microsoft\Windows Defender`
TODO: Add from here: https://learn.microsoft.com/en-us/mem/intune/protect/antivirus-security-experience-windows-settings

New scripts:

- Disable "Windows Security Center" service
- Kill SmartScreen process
- Disable "Microsoft Security Core Boot" service

Improved scripts:

- Disable Intrusion Prevention System (IPS): Add CLI command to disable
  it.

TODO: These to separate commit

TODO:

- Improve disabling of `RenameSystemFile` AsTrustedInstaller and get
  back all commented out code.
  • Loading branch information
undergroundwires committed Nov 10, 2024
1 parent 129d1a4 commit 8b7b59a
Show file tree
Hide file tree
Showing 2 changed files with 548 additions and 60 deletions.
Loading

0 comments on commit 8b7b59a

Please sign in to comment.