Protection
Search for protections so we will need to bypass or evade.
Windows Defender Status
Get-MpComputerStatus
Language Mode
$ExecutionContext.SessionState.LanguageMode
List AppLocker Rules
Get-AppLockerPolicy -Effective | select -ExpandProperty RuleCollections
Test AppLocker Policy
Get-AppLockerPolicy -Local | Test-AppLockerPolicy -path C:\Windows\System32\cmd.exe -User Everyone
Last updated
Was this helpful?