poc
32 lines
2.2 KiB
Plaintext
32 lines
2.2 KiB
Plaintext
===POWERSHELL_STATUS===
|
|
#< CLIXML
|
|
|
|
|
|
AMServiceEnabled : True
|
|
AMRunningMode : Normal
|
|
AntispywareEnabled : True
|
|
AntivirusEnabled : True
|
|
BehaviorMonitorEnabled : False
|
|
IoavProtectionEnabled : False
|
|
NISEnabled : False
|
|
OnAccessProtectionEnabled : False
|
|
RealTimeProtectionEnabled : False
|
|
IsTamperProtected : False
|
|
DefenderSignaturesOutOfDate : False
|
|
QuickScanAge : 0
|
|
FullScanAge : 4294967295
|
|
|
|
|
|
|
|
---EXCLUSIONS---
|
|
C:\WINDOWS\System32\SppExtComObjHook.dll
|
|
<Objs Version="1.1.0.1" xmlns="http://schemas.microsoft.com/powershell/2004/04"><Obj S="progress" RefId="0"><TN RefId="0"><T>System.Management.Automation.PSCustomObject</T><T>System.Object</T></TN><MS><I64 N="SourceId">1</I64><PR N="Record"><AV>Preparing modules for first use.</AV><AI>0</AI><Nil /><PI>-1</PI><PC>-1</PC><T>Completed</T><SR>-1</SR><SD> </SD></PR></MS></Obj><Obj S="progress" RefId="1"><TNRef RefId="0" /><MS><I64 N="SourceId">1</I64><PR N="Record"><AV>Preparing modules for first use.</AV><AI>0</AI><Nil /><PI>-1</PI><PC>-1</PC><T>Completed</T><SR>-1</SR><SD> </SD></PR></MS></Obj><Obj S="progress" RefId="2"><TNRef RefId="0" /><MS><I64 N="SourceId">2</I64><PR N="Record"><AV>Get-MpComputerStatus | Select-Object AMServiceEnabled,AMRunningMode,AntispywareEnabled,AntivirusEnabled,BehaviorMonitorEnabled,IoavProtectionEnabled,NISEnabled,OnAccessProtectionEnabled,RealTimeProtectionEnabled,IsTamperProtected,DefenderSignaturesOutOfDate,QuickScanAge,FullScanAge | Format-List; Write-Output '---EXCLUSIONS---'; Get-MpPreference | Select-Object -ExpandProperty ExclusionPath</AV><AI>2039607540</AI><Nil /><PI>-1</PI><PC>100</PC><T>Completed</T><SR>0</SR><SD>1/1 completed</SD></PR></MS></Obj><Obj S="progress" RefId="3"><TNRef RefId="0" /><MS><I64 N="SourceId">3</I64><PR N="Record"><AV>Get-MpPreference | Select-Object -ExpandProperty ExclusionPath</AV><AI>1263086057</AI><Nil /><PI>-1</PI><PC>100</PC><T>Completed</T><SR>0</SR><SD>1/1 completed</SD></PR></MS></Obj></Objs>===REG_FEATURES===
|
|
ERROR: Invalid syntax.
|
|
Type "REG QUERY /?" for usage.
|
|
ERROR: Invalid syntax.
|
|
Type "REG QUERY /?" for usage.
|
|
ERROR: Invalid syntax.
|
|
Type "REG QUERY /?" for usage.
|
|
===DONE===
|
|
[exit-status=0]
|