查看所有设置
powershell -ExecutionPolicy Bypass -Command Get-MpPreference
关闭/开启实时保护
powershell -ExecutionPolicy Bypass -Command Set-MpPreference -DisableRealtimeMonitoring $true
powershell -ExecutionPolicy Bypass -Command Set-MpPreference -DisableRealtimeMonitoring $false
添加/删除白名单规则
-ExclusionPath:文件/目录
-ExclusionProcess:进程
-ExclusionExtension:文件类型
powershell -ExecutionPolicy Bypass -Command Add-MpPreference
powershell -ExecutionPolicy Bypass -Command Remove-MpPreference
示例:powershell -ExecutionPolicy Bypass -Command Add-MpPreference -ExclusionProcess “payload.exe”
© 版权声明
THE END
请登录后查看评论内容