55
GitHub - hfiref0x/MpEnum: Enumerate Windows Defender threat families and dump th...
source link: https://github.com/hfiref0x/MpEnum
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
README.md
MpEnum
Enumerate Windows Defender threat families and dump their names according category.
System Requirements
- x86/x64 Windows 8/8.1/10;
- R/W access to the current directory to be able save results;
- Windows Defender Client.
Usage
No specific usage required. Just run compiled executable (in command prompt for better experience).
Dump
Included dump of following versions:
- Product: 4.18.1806.18062
- Engine: 1.1.15100.1
- AV Signatures: 1.273.443.0
- AS Signatures: 1.273.443.0
- NIS Signatures: 1.273.443.0
Build
MpEnum comes with full source code written in C. Please note that included MpClient.h is build on official available Microsoft documentation with fixes and updates that actually make it work. It maybe different from MS private version. In order to build from source you need Microsoft Visual Studio 2015 and later versions.
Authors
(c) 2018 MpEnum Project
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK