vm-test-realsc.ps1
Disables Defender, removes directories
Disable Windows Defender realtimeWindows Defender disabled
SHA-2569700e7d57c1d343765c3997cd673fefc1923a56dbce3e1387c3dd34eaf7032a5
MaleculeO(Er)H(F)
Evidence
1# vm-test-realsc.ps1 — Run real shellcode tests with Defender suspended
2param(
3 [string]$Packages = "./inject/",
4 [string]$RunFilter = "RealShellcode",
10# Copy project
11if (Test-Path C:\maldev) { Remove-Item C:\maldev -Recurse -Force -EA SilentlyContinue }
12robocopy Z:\ C:\maldev /E /NFL /NDL /NJH /NJS /XD .git ignore | Out-Null
14# Suspend Defender
15Write-Host "Suspending Defender..."
16Set-MpPreference -DisableRealtimeMonitoring $true -EA SilentlyContinue