Reply to thread

Message

<blockquote data-quote="TairikuOkami" data-source="post: 935222" data-attributes="member: 61892">I use this, granted files or registry are not damaged.[SPOILER=MD Enable.bat][CODE]rem USE AT OWN RISK AS IS WITHOUT WARRANTY OF ANY KIND !!!!!rem https://www.microsoft.com/en-us/wdsi/defenderupdatesrem https://support.microsoft.com/en-us/help/4568292/defender-update-for-windows-operating-system-installation-imagesrem https://docs.microsoft.com/en-us/powershell/module/defender/set-mppreference?view=win10-psrem https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protectionrem https://github.com/AndyFul/ConfigureDefenderrem https://github.com/AndyFul/Hard_Configuratorreg delete &quot;HKLM\Software\Policies\Microsoft\Windows Defender&quot; /freg add &quot;HKLM\Software\Microsoft\Windows\CurrentVersion\Run&quot; /v &quot;SecurityHealth&quot; /t REG_EXPAND_SZ /d &quot;\&quot;%windir%\system32\SecurityHealthSystray.exe\&quot;&quot; /frem Restore WD shellreg add &quot;HKLM\Software\Classes\*\shellex\ContextMenuHandlers\EPP&quot; /ve /t REG_SZ /d &quot;{09A47860-11B0-4DA5-AFA5-26D86198A780}&quot; /freg add &quot;HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\EPP&quot; /ve /t REG_SZ /d &quot;{09A47860-11B0-4DA5-AFA5-26D86198A780}&quot; /freg add &quot;HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\EPP&quot; /ve /t REG_SZ /d &quot;{09A47860-11B0-4DA5-AFA5-26D86198A780}&quot; /frem Enable WD servicesreg add &quot;HKLM\System\CurrentControlSet\Services\BFE&quot; /v &quot;Start&quot; /t REG_DWORD /d &quot;2&quot; /freg add &quot;HKLM\System\CurrentControlSet\Services\MpsSvc&quot; /v &quot;Start&quot; /t REG_DWORD /d &quot;2&quot; /freg add &quot;HKLM\System\CurrentControlSet\Services\SecurityHealthService&quot; /v &quot;Start&quot; /t REG_DWORD /d &quot;2&quot; /freg add &quot;HKLM\System\CurrentControlSet\Services\SgrmBroker&quot; /v &quot;Start&quot; /t REG_DWORD /d &quot;2&quot; /freg add &quot;HKLM\System\CurrentControlSet\Services\WdBoot&quot; /v &quot;Start&quot; /t REG_DWORD /d &quot;2&quot; /freg add &quot;HKLM\System\CurrentControlSet\Services\WdFilter&quot; /v &quot;Start&quot; /t REG_DWORD /d &quot;2&quot; /freg add &quot;HKLM\System\CurrentControlSet\Services\WdNisDrv&quot; /v &quot;Start&quot; /t REG_DWORD /d &quot;2&quot; /freg add &quot;HKLM\System\CurrentControlSet\Services\WdNisSvc&quot; /v &quot;Start&quot; /t REG_DWORD /d &quot;2&quot; /freg add &quot;HKLM\System\CurrentControlSet\Services\WinDefend&quot; /v &quot;Start&quot; /t REG_DWORD /d &quot;2&quot; /frem 1 - Enable Loggingreg add &quot;HKLM\System\CurrentControlSet\Control\WMI\Autologger\DefenderApiLogger&quot; /v &quot;Start&quot; /t REG_DWORD /d &quot;1&quot; /freg add &quot;HKLM\System\CurrentControlSet\Control\WMI\Autologger\DefenderAuditLogger&quot; /v &quot;Start&quot; /t REG_DWORD /d &quot;1&quot; /frem Enable WD Tasksschtasks /Change /TN &quot;Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy Refresh&quot; /Enableschtasks /Change /TN &quot;Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance&quot; /Enableschtasks /Change /TN &quot;Microsoft\Windows\Windows Defender\Windows Defender Cleanup&quot; /Enableschtasks /Change /TN &quot;Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan&quot; /Enableschtasks /Change /TN &quot;Microsoft\Windows\Windows Defender\Windows Defender Verification&quot; /Enablerem CloudExtendedTimeout / 1 - 50 / block a suspicious file for up to 60 seconds (Default is 10)rem reg add &quot;HKLM\Software\Policies\Microsoft\Windows Defender\MpEngine&quot; /v &quot;MpBafsExtendedTimeout&quot; /t REG_DWORD /d &quot;0&quot; /frem CloudBlockLevel / 0 - Default / 2 - High / 4 - High+ / 6 - Zero tolerance (block all unknown executables)rem reg add &quot;HKLM\Software\Policies\Microsoft\Windows Defender\MpEngine&quot; /v &quot;MpCloudBlockLevel&quot; /t REG_DWORD /d &quot;0&quot; /frem 1 - Potentially Unwanted Application protection (PUP) is enabled, the applications with unwanted behavior will be blocked at download and install-timereg add &quot;HKLM\Software\Policies\Microsoft\Windows Defender\MpEngine&quot; /v &quot;MpEnablePus&quot; /t REG_DWORD /d &quot;1&quot; /frem Block at First Sight / 0 - Enable / 1 - Disablereg add &quot;HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet&quot; /v &quot;DisableBlockAtFirstSeen&quot; /t REG_DWORD /d &quot;0&quot; /frem Cloud-based Protection / 0 - Disable / 1 - Basic / 2 - Advancedreg add &quot;HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet&quot; /v &quot;SpynetReporting&quot; /t REG_DWORD /d &quot;1&quot; /frem Send file samples when further analysis is required / 0 - Always prompt / 1 - Send safe samples automatically / 2 - Never send / 3 - Send all samples automaticallyrem reg add &quot;HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet&quot; /v &quot;SubmitSamplesConsent&quot; /t REG_DWORD /d &quot;1&quot; /frem reg add &quot;HKLM\Software\Microsoft\Windows Defender\Features&quot; /v &quot;TamperProtection&quot; /t REG_DWORD /d &quot;1&quot; /fshutdown /r[/CODE][/SPOILER]</blockquote>

[QUOTE="TairikuOkami, post: 935222, member: 61892"] I use this, granted files or registry are not damaged. [SPOILER=MD Enable.bat] [CODE]rem USE AT OWN RISK AS IS WITHOUT WARRANTY OF ANY KIND !!!!! rem https://www.microsoft.com/en-us/wdsi/defenderupdates rem https://support.microsoft.com/en-us/help/4568292/defender-update-for-windows-operating-system-installation-images rem https://docs.microsoft.com/en-us/powershell/module/defender/set-mppreference?view=win10-ps rem https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/customize-exploit-protection rem https://github.com/AndyFul/ConfigureDefender rem https://github.com/AndyFul/Hard_Configurator reg delete "HKLM\Software\Policies\Microsoft\Windows Defender" /f reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" /v "SecurityHealth" /t REG_EXPAND_SZ /d "\"%windir%\system32\SecurityHealthSystray.exe\"" /f rem Restore WD shell reg add "HKLM\Software\Classes\*\shellex\ContextMenuHandlers\EPP" /ve /t REG_SZ /d "{09A47860-11B0-4DA5-AFA5-26D86198A780}" /f reg add "HKLM\Software\Classes\Drive\shellex\ContextMenuHandlers\EPP" /ve /t REG_SZ /d "{09A47860-11B0-4DA5-AFA5-26D86198A780}" /f reg add "HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\EPP" /ve /t REG_SZ /d "{09A47860-11B0-4DA5-AFA5-26D86198A780}" /f rem Enable WD services reg add "HKLM\System\CurrentControlSet\Services\BFE" /v "Start" /t REG_DWORD /d "2" /f reg add "HKLM\System\CurrentControlSet\Services\MpsSvc" /v "Start" /t REG_DWORD /d "2" /f reg add "HKLM\System\CurrentControlSet\Services\SecurityHealthService" /v "Start" /t REG_DWORD /d "2" /f reg add "HKLM\System\CurrentControlSet\Services\SgrmBroker" /v "Start" /t REG_DWORD /d "2" /f reg add "HKLM\System\CurrentControlSet\Services\WdBoot" /v "Start" /t REG_DWORD /d "2" /f reg add "HKLM\System\CurrentControlSet\Services\WdFilter" /v "Start" /t REG_DWORD /d "2" /f reg add "HKLM\System\CurrentControlSet\Services\WdNisDrv" /v "Start" /t REG_DWORD /d "2" /f reg add "HKLM\System\CurrentControlSet\Services\WdNisSvc" /v "Start" /t REG_DWORD /d "2" /f reg add "HKLM\System\CurrentControlSet\Services\WinDefend" /v "Start" /t REG_DWORD /d "2" /f rem 1 - Enable Logging reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\DefenderApiLogger" /v "Start" /t REG_DWORD /d "1" /f reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\DefenderAuditLogger" /v "Start" /t REG_DWORD /d "1" /f rem Enable WD Tasks schtasks /Change /TN "Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy Refresh" /Enable schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance" /Enable schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cleanup" /Enable schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan" /Enable schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Verification" /Enable rem CloudExtendedTimeout / 1 - 50 / block a suspicious file for up to 60 seconds (Default is 10) rem reg add "HKLM\Software\Policies\Microsoft\Windows Defender\MpEngine" /v "MpBafsExtendedTimeout" /t REG_DWORD /d "0" /f rem CloudBlockLevel / 0 - Default / 2 - High / 4 - High+ / 6 - Zero tolerance (block all unknown executables) rem reg add "HKLM\Software\Policies\Microsoft\Windows Defender\MpEngine" /v "MpCloudBlockLevel" /t REG_DWORD /d "0" /f rem 1 - Potentially Unwanted Application protection (PUP) is enabled, the applications with unwanted behavior will be blocked at download and install-time reg add "HKLM\Software\Policies\Microsoft\Windows Defender\MpEngine" /v "MpEnablePus" /t REG_DWORD /d "1" /f rem Block at First Sight / 0 - Enable / 1 - Disable reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet" /v "DisableBlockAtFirstSeen" /t REG_DWORD /d "0" /f rem Cloud-based Protection / 0 - Disable / 1 - Basic / 2 - Advanced reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet" /v "SpynetReporting" /t REG_DWORD /d "1" /f rem Send file samples when further analysis is required / 0 - Always prompt / 1 - Send safe samples automatically / 2 - Never send / 3 - Send all samples automatically rem reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet" /v "SubmitSamplesConsent" /t REG_DWORD /d "1" /f rem reg add "HKLM\Software\Microsoft\Windows Defender\Features" /v "TamperProtection" /t REG_DWORD /d "1" /f shutdown /r [/CODE] [/SPOILER] [/QUOTE]

Verification