trinitor/DetectionLab
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Fix hostname variable when disabling Windows Defender

Browse Source
This commit is contained in:
Filippo Anarratone
2018-02-10 14:46:26 +00:00
parent 349ee4f76d
commit e389b3f97e
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
Vagrant/Vagrantfile vendored
View File

@@ -119,7 +119,6 @@ Vagrant.configure("2") do |config|
cfg.vm.hostname = "win10" cfg.vm.hostname = "win10"
cfg.vm.communicator = "winrm" cfg.vm.communicator = "winrm"
cfg.vm.provision "shell", inline: "Set-MpPreference -ExclusionPath C:\\commander.exe, C:\\Tools"
cfg.vm.network :private_network, ip: "192.168.38.4", gateway: "192.168.38.1", dns: "192.168.38.2" cfg.vm.network :private_network, ip: "192.168.38.4", gateway: "192.168.38.1", dns: "192.168.38.2"
cfg.vm.provision "shell", path: "scripts/fix-second-network.ps1", privileged: false, args: "-ip 192.168.38.4 -dns 192.168.38.2" cfg.vm.provision "shell", path: "scripts/fix-second-network.ps1", privileged: false, args: "-ip 192.168.38.4 -dns 192.168.38.2"

3
Vagrant/scripts/install-utilities.ps1
View File

@@ -20,8 +20,9 @@ apm install language-batch
apm install language-docker apm install language-docker
# Disable Windows Defender realtime scanning before downloading Mimikatz # Disable Windows Defender realtime scanning before downloading Mimikatz
If ($hostname -eq "win10") { If ($env:computername -eq "WIN10") {
set-MpPreference -DisableRealtimeMonitoring $true set-MpPreference -DisableRealtimeMonitoring $true
Set-MpPreference -ExclusionPath C:\commander.exe, C:\Tools
} }
# Purpose: Downloads and unzips a copy of the latest Mimikatz trunk # Purpose: Downloads and unzips a copy of the latest Mimikatz trunk