Skip to content

Instantly share code, notes, and snippets.

@kr153

kr153/Microsoft Defender Antimalware

Created March 21, 2024 06:11
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save kr153/a4aa347d4168cb45e1478045144cc2b7 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save kr153/a4aa347d4168cb45e1478045144cc2b7 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Microsoft Defender Antimalware
MsMpEng.exe - add to exclution - folder and process
Open admin PowerShell and run:
New-MpPerformanceRecording -recordto C:\Defender.ETL
Stop the trace after 60 seconds.
Then run:
Get-MpPerformanceReport -Path:C:\Defender.ETL -TopFiles:100 -TopExtensions:10 -TopProcesses:10 -TopScans:100 | out-file c:\scans.txt
and then
tasklist /svc >>c:\scans.txt
Another option to try:
cd "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24010.7-0"
MpCmdRun.exe -ResetPlatform
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment