Domovská stránka Prehľadávať Pomoc
Prihlásiť sa
zhensolid
/
OperatorsKit
1
0
Fork 0
Súbory Issues 0 Pull requesty 0 Wiki
Strom: ff56550a16
Branche Tagy
OperatorsKit
/
KIT
/
EnumExclusions
RTO 75c6c241e6 QoL update 2 rokov pred
..
README.md 75c6c241e6 QoL update 2 rokov pred
beacon.h 75c6c241e6 QoL update 2 rokov pred
bofcompile.bat 75c6c241e6 QoL update 2 rokov pred
enumexclusions.c 75c6c241e6 QoL update 2 rokov pred
enumexclusions.cna 75c6c241e6 QoL update 2 rokov pred
enumexclusions.h 75c6c241e6 QoL update 2 rokov pred
enumexclusions.o 75c6c241e6 QoL update 2 rokov pred

README.md

EnumExclusions

Enumerate Windows Defender for excluded files, folders, extentions and processes.

This operation requires elevated privileges. Furthermore, currently only Windows Defender exclusions are supported. However, this code is easily enhanced to also support other AV products that communicate via WMI.

Usage

  • enumexclusions

Compile

  • 1. Make sure Visual Studio is installed and supports C/C++.
  • 2. Open the x64 Native Tools Command Prompt for VS <2019/2022> terminal.
  • 3. Run the bofcompile.bat script to compile the object file.
  • 4. In Cobalt strike, use the script manager to load the .cna script to import the tool.