Página Principal Explorar Ajuda
Iniciar Sessão
zhensolid
/
OperatorsKit
1
0
Fork 0
Ficheiros Problemas 0 Pull Requests 0 Wiki
Árvore: 3ead737557
Ramos Etiquetas
OperatorsKit
/
KIT
/
FindExclusions
unknown 3ead737557 New tool update há 2 anos atrás
..
README.md 3ead737557 New tool update há 2 anos atrás
beacon.h 3ead737557 New tool update há 2 anos atrás
bofcompile.bat 3ead737557 New tool update há 2 anos atrás
findexclusions.c 3ead737557 New tool update há 2 anos atrás
findexclusions.cna 3ead737557 New tool update há 2 anos atrás
findexclusions.h 3ead737557 New tool update há 2 anos atrás
findexclusions.o 3ead737557 New tool update há 2 anos atrás

README.md

FindExclusions

Check Windows Defender for excluded files, folders, extentions and processes.

This operation requires elevated privileges. Furthermore, currently only Windows Defender exclusions are supported. However, this code is easily enhanced to also support other AV products that communicate via WMI.

Usage

  • findexclusions

Compile

  • 1. Make sure Visual Studio is installed and supports C/C++.
  • 2. Open the x64 Native Tools Command Prompt for VS <2019/2022> terminal.
  • 3. Run the bofcompile.bat script to compile the object file.
  • 4. In Cobalt strike, use the script manager to load the .cna script to import the tool.