iexpurgator

sudo apt install dotnet-sdk-6.0
sudo apt install python3 python3-pip python3-venv
sudo apt install libssl-dev

# create virtual environment
python -m venv venv
source venv/bin/activate
pip install plaso
deactivate

iexpurgator

@echo off
color 0f
pushd "%~dp0"
set command=cscript //nologo ospp.vbs 
title Auto activate Office 2010-2013-2016 Volume License
>nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system"
if "%errorlevel%" NEQ "0" (
 echo: Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
 echo: UAC.ShellExecute "%~s0", "", "", "runas", 1 >> "%temp%\getadmin.vbs"
 "%temp%\getadmin.vbs" & exit 

iexpurgator

## Shortcut (Administrator): powershell.exe -ExecutionPolicy Bypass -File "<full path>\windef_toggle.ps1"

$preferences = Get-MpPreference
$realtimeDisableStatus = $preferences.DisableRealtimeMonitoring
# Set-MpPreference -DisableRealtimeMonitoring (!$preferences.DisableRealtimeMonitoring)

if ($realtimeDisableStatus) { # Disabled -> Enable
	Set-MpPreference -DisableRealtimeMonitoring $false
	Set-MpPreference -MAPSReporting Advanced
	Set-MpPreference -SubmitSamplesConsent 1

iexpurgator

import struct
import lznt1    # lznt1
import capstone # capstone-engine
import re
import pefile   # pefile


def DWORD(i):
    return i & 0xFFFFFFFF

iexpurgator

{
  "dns": {
    "hosts": {
      "domain:googleapis.cn": "googleapis.com"
    },
    "servers": [
      "1.1.1.1"
    ]
  },
  "inbounds": [