izenynn
GitHubBlog
Search…
izenynn
README
🪵
resources
books
shells
🛠
tools
nmap
chisel
🐧
linux
priv esc
🪟
windows
priv esc
💻
LAB
windows
Powered By GitBook
windows
Hacking lab in Windows

Disable Microsoft Defender Antivirus:

In Windows versions 1909 and higher, Tamper Protection was added. Tamper Protection must be disabled, otherwise Group Policy settings are ignored.
  1. 1.
    Open Windows Security (type Windows Security in the search box)
  2. 2.
    Virus & threat protection > Virus & threat protection settings > Manage settings
  3. 3.
    Switch Tamper Protection to Off
It is not necessary to change any other setting (Real Time Protection, etc.)
Important. Tamper Protection must be disabled before changing Group Policy settings.
To permanently disable Real Time Protection
  1. 1.
    Open Local Group Policy Editor (type gpedit in the search box)
  2. 2.
    Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus > Real-time Protection
  3. 3.
    Enable Turn off real-time protection
  4. 4.
    Reboot
Make sure to reboot before making the next change
To permanently disable Microsoft Defender:
  1. 1.
    Open Local Group Policy Editor (type gpedit in the search box)
  2. 2.
    Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus
  3. 3.
    Enable Turn off Microsoft Defender Antivirus
  4. 4.
    Reboot

Comando VM

Welcome to CommandoVM - a fully customizable, Windows-based security distribution for penetration testing and red teaming.
GitHub - mandiant/commando-vm: Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. [email protected]
GitHub
windows - Previous
priv esc
Last modified 3mo ago
Copy link
Outline
Disable Microsoft Defender Antivirus:
Comando VM