(29 December 18, 18:49)JM Security Wrote: Hi guys, WD is improved very much in newer releases. But how can we enable PUA? Simply open Powershell and type this:
Set-MpPreference -PUAProtection 1
To disable it just type:
Set-MpPreference -PUAProtection 0
I have some questions.
- - Previously Powershell was needed run in elevated mode, has it changed now?
- - Previously, was also possible to use the so-called "audit mode", is this mode no longer available?
1. Open an elevated PowerShell.
2. Enter the command below you want to use into the elevated PowerShell, and press Enter.
(Disable Windows Defender PUA protection - Default settings)
Set-MpPreference -PUAProtection 0
or
Set-MpPreference -PUAProtection Disabled
OR
(Enable Windows Defender PUA protection)
Set-MpPreference -PUAProtection 1
or
Set-MpPreference -PUAProtection Enabled
OR
(Audit Mode - will detect PUAs, but will not block them)
Set-MpPreference -PUAProtection 2
or
Set-MpPreference -PUAProtection AuditMode