azcomputerguru/claudetools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sync: auto-sync from DESKTOP-0O8A1RL at 2026-05-15 15:23:02

Browse Source 
Author: Mike Swanson
Machine: DESKTOP-0O8A1RL
Timestamp: 2026-05-15 15:23:02
This commit is contained in:
Mike Swanson
2026-05-15 15:23:05 -07:00
parent 6d6de33cb7
commit 31088cb8de
21 changed files with 1367 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
session-logs/disable_defender.ps1 Normal file
View File

@@ -0,0 +1,24 @@
$regPath = "HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender"
if (-not (Test-Path $regPath)) { New-Item -Path $regPath -Force | Out-Null }
Set-ItemProperty -Path $regPath -Name "DisableAntiSpyware" -Value 1 -Type DWord
Write-Host "Policy key set"
Set-MpPreference -DisableRealtimeMonitoring $true -ErrorAction SilentlyContinue
Set-MpPreference -DisableBehaviorMonitoring $true -ErrorAction SilentlyContinue
Set-MpPreference -DisableIOAVProtection $true -ErrorAction SilentlyContinue
Set-MpPreference -DisableScriptScanning $true -ErrorAction SilentlyContinue
Set-MpPreference -DisableArchiveScanning $true -ErrorAction SilentlyContinue
Write-Host "MpPreference overrides applied"
try {
Stop-Service -Name WinDefend -Force -ErrorAction Stop
Set-Service -Name WinDefend -StartupType Disabled
Write-Host "WinDefend: stopped and disabled"
} catch {
Write-Host "WinDefend stop: $_"
}
$pref = Get-MpPreference
Write-Host "RealtimeMonitoring disabled: $($pref.DisableRealtimeMonitoring)"
$regVal = (Get-ItemProperty -Path $regPath -Name DisableAntiSpyware -ErrorAction SilentlyContinue).DisableAntiSpyware
Write-Host "Policy DisableAntiSpyware: $regVal"