Toggle Windows Defender's Real-time Protection

toggle_real_time_protection.ps1

# Run as administrator
if (!([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator")) { 
    Start-Process powershell.exe "-NoProfile -ExecutionPolicy Bypass -File `"$PSCommandPath`"" -Verb RunAs; exit 
}

$Preferences = Get-MpPreference

if($Preferences.DisableRealtimeMonitoring) {
    Set-MpPreference -DisableRealtimeMonitoring 0
} else {
    Set-MpPreference -DisableRealtimeMonitoring 1
}