
Invoke-DumpMDEConfig
PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges required )
configuration-auditingdefensive-toolsforensics+3
155

PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges required )

Client-server tool for live data collection during incident response. Admin sends requests to clients to gather system information for forensic…