Deskmodder.de

Code: Alles auswählen

"Set-MpPreference -ScanAvgCPULoadFactor 5"
"Set-MpPreference -EnableLowCpuPriority $true"
"Set-MpPreference -DisableCpuThrottleOnIdleScans $false"

Code: Alles auswählen

PowerWashText "### WINDOWS DEFENDER CONFIGURATION ###"
PowerWashText ""


if (Confirm "Apply high-security Defender policies? (Attack Surface Reduction, etc.)" -Auto $false -ConfigKey "Defender.ApplyRecommendedSecurityPolicies") {
    Write-Host "- Applying policies..." -Nonewline
    RunScriptAsSystem -Path "$PSScriptRoot/$global:ScriptName" -ArgString "/ElevatedAction /ApplySecurityPolicy"
    "- Complete"
}

if (Confirm "Configure Windows Defender to run scans only when computer is idle?" -Auto $true -ConfigKey "Defender.DefenderScanOnlyWhenIdle") {
    if ($global:do_config) {
        $timeout_mins = $global:config_map.Defender.DefenderScanOnlyWhenIdle_TimeoutMins
    }
    else {
        $timeout_mins = 10
    }
    $wait = New-TimeSpan -Minutes $timeout_mins
    $settings = New-ScheduledTaskSettingsSet -RunOnlyIfIdle -IdleWaitTimeout $wait -RestartOnIdle
    Set-ScheduledTask -TaskPath "Microsoft\Windows\Windows Defender" -TaskName "Windows Defender Cache Maintenance" -Settings $settings | Out-Null
    Set-ScheduledTask -TaskPath "Microsoft\Windows\Windows Defender" -TaskName "Windows Defender Cleanup" -Settings $settings | Out-Null
    Set-ScheduledTask -TaskPath "Microsoft\Windows\Windows Defender" -TaskName "Windows Defender Scheduled Scan" -Settings $settings | Out-Null
    Set-ScheduledTask -TaskPath "Microsoft\Windows\Windows Defender" -TaskName "Windows Defender Verification" -Settings $settings | Out-Null
    Set-MpPreference -ScanOnlyIfIdleEnabled $true
    "- Complete"
}

if (Confirm "Run Defender tasks at a lower priority?" -Auto $true -ConfigKey "Defender.DefenderScanLowPriority") {
    if ($global:do_config) {
        $max_cpu_usage = $global:config_map.Defender.DefenderScanLowPriority_MaxCpuUsage
    }
    else {
        $max_cpu_usage = 5
    }
    Set-MpPreference -EnableLowCpuPriority $true
    Set-MpPreference -ScanAvgCPULoadFactor $max_cpu_usage
    "- Complete"
}

if (Confirm "Disable real-time protection from Windows Defender? (CAUTION) (EXPERIMENTAL)" -Auto $false -ConfigKey "Defender.DisableRealtimeMonitoringCAUTION") {
    $disable_all_defender = Confirm "--> Disable Windows Defender entirely? (CAUTION) (EXPERIMENTAL)" -Auto $false -ConfigKey "Defender.DisableAllDefenderCAUTIONCAUTION"
    RunScriptAsSystem -Path "$PSScriptRoot/$global:ScriptName" -ArgString "/ElevatedAction /DisableRealtimeMonitoring $(If ($disable_all_defender) {'/DisableAllDefender'} Else {''})"
	
    "- Complete (requires Tamper Protection disabled to take effect)"
}