From 88cd120e6e7a25e29081ce04d29d20b070466e90 Mon Sep 17 00:00:00 2001 From: Chris Long Date: Sun, 28 Apr 2019 01:42:25 -0700 Subject: [PATCH] Don't try to re-disable Defender --- Vagrant/scripts/install-redteam.ps1 | 14 +------------- 1 file changed, 1 insertion(+), 13 deletions(-) diff --git a/Vagrant/scripts/install-redteam.ps1 b/Vagrant/scripts/install-redteam.ps1 index b5a3bfe..2e6928a 100644 --- a/Vagrant/scripts/install-redteam.ps1 +++ b/Vagrant/scripts/install-redteam.ps1 @@ -2,19 +2,7 @@ Write-Host "Installing Red Team Tooling..." - -# Disable Windows Defender realtime scanning before downloading Mimikatz and drop the firewall -If ($env:computername -eq "win10") { - If (Test-Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender") - { - Remove-Item "HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender" -Recurse -Force - } - gpupdate /force | Out-String - Write-Host "Disabling Windows Defender Realtime Monitoring..." - Set-MpPreference -ExclusionPath C:\commander.exe, C:\Tools - set-MpPreference -DisableRealtimeMonitoring $true - Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False -} +# Windows Defender should be disabled already by O&O ShutUp10 # Purpose: Downloads and unzips a copy of the latest Mimikatz trunk Write-Host "Determining latest release of Mimikatz..."