Stack Overflow
Stack Overflow

Questions tagged [windows-defender]

Use with Windows Security which was formally called Windows Defender Security Center

References:
Help protect my device with Windows Security

Related tag:
Windows-Security

180 questions
0
votes
0 answers

Why reading MachineGUID is a virus?

Why is it that when I read SOFTWARE\Microsoft\Cryptography\MachineGuid from the registry, my program is detected by the Windows Defender as a virus?
amunino
  • 9
  • 1
0
votes
0 answers

Combine PowerShell Defender outlets into a combined CSV file for monitoring

We cancelled our antivirus software (Kaspersky Anti-Virus, duh) and depend on the Windows Defender in the meantime. We won’t be getting any SIEM server to log and monitor all our Agents Defender Status, so I'm trying to make my life a bit easier by…
D.Cross
  • 1
  • 1
0
votes
3 answers

Microsoft security center api filter not working

I'm attempting to use this URI to find a specific machine ID so then we can query for the most recent logged on user. When I run this I get an output of all the devices in defender. I'm stuck and not sure where to go from…
John418
  • 33
  • 1
  • 6
0
votes
1 answer

What are the Antimalware Protected Process Light (AM-PPL) dll loading requirements?

According to https://learn.microsoft.com/en-us/windows/win32/services/protecting-anti-malware-services- "any non-Windows DLLs that get loaded into the protected process must be signed with an appropriate certificate." What are the conditions for a…
bananabr
  • 147
  • 11
0
votes
0 answers

unity WebRequest - Windows security

Hi guys I have problem with Windows Antivirus I downloaded a zip file from the IPFS My code : using (UnityWebRequest wwwAssetsDownloader = UnityWebRequest.Get(JsonData[3])) { yield return…
ArIaNFury
  • 63
  • 1
  • 9
0
votes
1 answer

Kusto Query Language - Microsoft Defender

I am trying to create a custom query on Microsoft defender advanced hunting platform that scan the device for a specific extension. I tried these queries: DeviceFileEvents | where FileName endswith ".xxx" DeviceFileEvents | where FileName like…
Ben Benhamo
  • 1
  • 1
0
votes
0 answers

Return True / False values when scanning a ps1 file from AMSI?

I would like to write a small script as part of a pentest that validates and outputs whether Windows Defender Antimalware Scan Interface (AMSI) flags the file or not. Since I need a powershell script to do the scanning best, but I don't know enough…
LukeProducts
  • 1
  • 1
0
votes
1 answer

Changing path to WSL remote

I have an issue with VS Code and WSL remote extension. On my machine, Windows Defender Firewall blocked node. I do not have sufficient rights to unblock it, but admins created excluded folder, where based on what they said "I can copy everything…
Feri
  • 1
0
votes
1 answer

Powershell output for Microsoft Defender status

I'm very new to PowerShell and I have a question in regards to Microsoft Intune and PowerShell. I have this GetMPComputerStatus|select AMRunning to check if Defender is "Normal" or "Passive", that's the only two outcomes. How do I make an if or…
ProgramToddler
  • 3
  • 2
0
votes
0 answers

How to invoke STATUS_VIRUS_INFECTED 0xC0000906 programmatically?

When trying to access files quarantined by Windows Defender or another antivirus program, I receive 0xC0000906 STATUS_VIRUS_INFECTED error. How can I programmatically lock a file, so another program will see this error code? Is there Windows API the…
twieczor
  • 11
0
votes
2 answers

How do you make Windows Defender Firewall rule for MS Teams to work?

I'm currently configuring Windows Defender on Windows 10 setting up such that only restricted apps can be run. In one of the allowed apps, I want to have Microsoft Teams be able to run under this environment. I added the following exe files as…
Dummy
  • 51
  • 1
  • 7
0
votes
1 answer

Allow a windows exel addin(.xll) file under windows defender

I have a excel addin plugin(.xll) that is getting blocked due to windows defender. So how to set exclusion for this file since this file is a part of a msi package which will be deployed at client machines and asking the client to add a exclusion in…
vibhor Gupta
  • 103
  • 11
0
votes
1 answer

How to solve Windows Defender Blocking app?

Hi I wrote a WPF Programm and want to share it. But on other PC's the Microsoft Defender Always blocks this app. How can I stop that problem like every other app?
Habus G
  • 3
  • 2
0
votes
1 answer

Filtering Powershell result in For Each statement

I've written (or trying to write atleast) a simple script to get all Microsoft Intune Defender Policies that are a assigned to a specific Azure AD group. The scripts gets all Defender policies, finds the group ID linked to those policies and then it…
Joachim
  • 3
  • 1
0
votes
1 answer

Windows Defender is Classifying My Python Script As a Trojan, Why is that?

I wrote a simple python script in which I have used the Python Global-Hotkeys Module to make a simple script which does nothing but wait for some key-combination to be pressed and once the key combination is pressed, the script turns off the…
Aaron Jones
  • 72
  • 2
  • 9
1 2 3
…
11 12