sync/es3n1n-defendnot
1
0
Fork 0
mirror of https://github.com/es3n1n/defendnot.git synced 2026-10-01 10:01:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: add extra-strip.bat (#59)

Browse Source
This commit is contained in:
Arsenii es3n1n
2026-08-15 17:27:26 +02:00
committed by GitHub
parent 0d15ea6666
commit 192b2d798c
3 changed files with 38 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
README.md
View File

@@ -65,10 +65,16 @@ Optional arguments:
--disable-autorun disable autorun task creation
```
## Stripping Defender out further (optional)
defendnot only registers a fake AV through WSC, but if you want to strip more Defender stuff out, run the optional `extra-strip.bat` as admin after defendnot is active. It disables a bunch more Defender policies in registry: real-time monitoring, behavior monitoring, cloud reporting, signature updates, etc.
It's a separate script because the keys are finicky and undoing them on `--disable` would mean saving every value first somewhere and writing all of them back, which is _waaay_ more bookkeeping than I feel like implementing.
## Limitations
- **Needs to stay on disk:**
To keep the AV registration persistent after reboot, defendnot adds itself to autorun. That means the binaries have to remain on your system.
To keep the AV registration after reboot, defendnot adds itself to autorun.
## Writeup