Add detection for Microsoft Defender for Endpoint
							parent
							
								
									ef411e14ca
								
							
						
					
					
						commit
						c817ae8bd9
					
				| 
						 | 
					@ -260,6 +260,10 @@ echo PowerShell is not working properly. Aborting...
 | 
				
			||||||
if /i "!tstresult2!"=="FullLanguage" (
 | 
					if /i "!tstresult2!"=="FullLanguage" (
 | 
				
			||||||
echo:
 | 
					echo:
 | 
				
			||||||
echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
					echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
				
			||||||
 | 
					echo:
 | 
				
			||||||
 | 
					sc query sense | find /i "RUNNING" %nul% && (
 | 
				
			||||||
 | 
					echo Installed Antivirus - Microsoft Defender for Endpoint
 | 
				
			||||||
 | 
					)
 | 
				
			||||||
cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
					cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
				
			||||||
)
 | 
					)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -282,6 +282,10 @@ echo PowerShell is not working properly. Aborting...
 | 
				
			||||||
if /i "!tstresult2!"=="FullLanguage" (
 | 
					if /i "!tstresult2!"=="FullLanguage" (
 | 
				
			||||||
echo:
 | 
					echo:
 | 
				
			||||||
echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
					echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
				
			||||||
 | 
					echo:
 | 
				
			||||||
 | 
					sc query sense | find /i "RUNNING" %nul% && (
 | 
				
			||||||
 | 
					echo Installed Antivirus - Microsoft Defender for Endpoint
 | 
				
			||||||
 | 
					)
 | 
				
			||||||
cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
					cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
				
			||||||
)
 | 
					)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -285,6 +285,10 @@ echo PowerShell is not working properly. Aborting...
 | 
				
			||||||
if /i "!tstresult2!"=="FullLanguage" (
 | 
					if /i "!tstresult2!"=="FullLanguage" (
 | 
				
			||||||
echo:
 | 
					echo:
 | 
				
			||||||
echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
					echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
				
			||||||
 | 
					echo:
 | 
				
			||||||
 | 
					sc query sense | find /i "RUNNING" %nul% && (
 | 
				
			||||||
 | 
					echo Installed Antivirus - Microsoft Defender for Endpoint
 | 
				
			||||||
 | 
					)
 | 
				
			||||||
cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
					cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
				
			||||||
)
 | 
					)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -290,6 +290,10 @@ echo PowerShell is not working properly. Aborting...
 | 
				
			||||||
if /i "!tstresult2!"=="FullLanguage" (
 | 
					if /i "!tstresult2!"=="FullLanguage" (
 | 
				
			||||||
echo:
 | 
					echo:
 | 
				
			||||||
echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
					echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
				
			||||||
 | 
					echo:
 | 
				
			||||||
 | 
					sc query sense | find /i "RUNNING" %nul% && (
 | 
				
			||||||
 | 
					echo Installed Antivirus - Microsoft Defender for Endpoint
 | 
				
			||||||
 | 
					)
 | 
				
			||||||
cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
					cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
				
			||||||
)
 | 
					)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -321,6 +321,10 @@ echo PowerShell is not working properly. Aborting...
 | 
				
			||||||
if /i "!tstresult2!"=="FullLanguage" (
 | 
					if /i "!tstresult2!"=="FullLanguage" (
 | 
				
			||||||
echo:
 | 
					echo:
 | 
				
			||||||
echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
					echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
				
			||||||
 | 
					echo:
 | 
				
			||||||
 | 
					sc query sense | find /i "RUNNING" %nul% && (
 | 
				
			||||||
 | 
					echo Installed Antivirus - Microsoft Defender for Endpoint
 | 
				
			||||||
 | 
					)
 | 
				
			||||||
cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
					cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
				
			||||||
)
 | 
					)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -348,6 +348,10 @@ echo PowerShell is not working properly. Aborting...
 | 
				
			||||||
if /i "!tstresult2!"=="FullLanguage" (
 | 
					if /i "!tstresult2!"=="FullLanguage" (
 | 
				
			||||||
echo:
 | 
					echo:
 | 
				
			||||||
echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
					echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
				
			||||||
 | 
					echo:
 | 
				
			||||||
 | 
					sc query sense | find /i "RUNNING" %nul% && (
 | 
				
			||||||
 | 
					echo Installed Antivirus - Microsoft Defender for Endpoint
 | 
				
			||||||
 | 
					)
 | 
				
			||||||
cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
					cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
				
			||||||
)
 | 
					)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -235,6 +235,10 @@ echo PowerShell is not working properly. Aborting...
 | 
				
			||||||
if /i "!tstresult2!"=="FullLanguage" (
 | 
					if /i "!tstresult2!"=="FullLanguage" (
 | 
				
			||||||
echo:
 | 
					echo:
 | 
				
			||||||
echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
					echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
				
			||||||
 | 
					echo:
 | 
				
			||||||
 | 
					sc query sense | find /i "RUNNING" %nul% && (
 | 
				
			||||||
 | 
					echo Installed Antivirus - Microsoft Defender for Endpoint
 | 
				
			||||||
 | 
					)
 | 
				
			||||||
cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
					cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
				
			||||||
)
 | 
					)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -240,6 +240,10 @@ echo PowerShell is not working properly. Aborting...
 | 
				
			||||||
if /i "!tstresult2!"=="FullLanguage" (
 | 
					if /i "!tstresult2!"=="FullLanguage" (
 | 
				
			||||||
echo:
 | 
					echo:
 | 
				
			||||||
echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
					echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
				
			||||||
 | 
					echo:
 | 
				
			||||||
 | 
					sc query sense | find /i "RUNNING" %nul% && (
 | 
				
			||||||
 | 
					echo Installed Antivirus - Microsoft Defender for Endpoint
 | 
				
			||||||
 | 
					)
 | 
				
			||||||
cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
					cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
				
			||||||
)
 | 
					)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -251,6 +251,10 @@ echo PowerShell is not working properly. Aborting...
 | 
				
			||||||
if /i "!tstresult2!"=="FullLanguage" (
 | 
					if /i "!tstresult2!"=="FullLanguage" (
 | 
				
			||||||
echo:
 | 
					echo:
 | 
				
			||||||
echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
					echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
				
			||||||
 | 
					echo:
 | 
				
			||||||
 | 
					sc query sense | find /i "RUNNING" %nul% && (
 | 
				
			||||||
 | 
					echo Installed Antivirus - Microsoft Defender for Endpoint
 | 
				
			||||||
 | 
					)
 | 
				
			||||||
cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
					cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
				
			||||||
)
 | 
					)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -252,6 +252,10 @@ echo PowerShell is not working properly. Aborting...
 | 
				
			||||||
if /i "!tstresult2!"=="FullLanguage" (
 | 
					if /i "!tstresult2!"=="FullLanguage" (
 | 
				
			||||||
echo:
 | 
					echo:
 | 
				
			||||||
echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
					echo Your antivirus software might be blocking the script, or PowerShell on your system might be corrupted.
 | 
				
			||||||
 | 
					echo:
 | 
				
			||||||
 | 
					sc query sense | find /i "RUNNING" %nul% && (
 | 
				
			||||||
 | 
					echo Installed Antivirus - Microsoft Defender for Endpoint
 | 
				
			||||||
 | 
					)
 | 
				
			||||||
cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
					cmd /c "%psc% ""$av = Get-WmiObject -Namespace root\SecurityCenter2 -Class AntiVirusProduct; $n = @(); foreach ($i in $av) { $n += $i.displayName }; if ($n) { Write-Host ('Installed Antivirus - ' + ($n -join ', '))}"""
 | 
				
			||||||
)
 | 
					)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
		Reference in New Issue