Geeks for your information
Windows Defender: how to turn ON PUA protection (Powershell) - Printable Version

+- Geeks for your information (https://www.geeks.fyi)
+-- Forum: Security (https://www.geeks.fyi/forumdisplay.php?fid=68)
+--- Forum: Security Vendors (https://www.geeks.fyi/forumdisplay.php?fid=87)
+---- Forum: Windows Defender (Microsoft) (https://www.geeks.fyi/forumdisplay.php?fid=94)
+---- Thread: Windows Defender: how to turn ON PUA protection (Powershell) (/showthread.php?tid=4936)



Windows Defender: how to turn ON PUA protection (Powershell) - Deep900 - 29 December 18

Hi guys, WD is improved very much in newer releases. But how can we enable PUA protection? Simply open Powershell and type this:

Set-MpPreference -PUAProtection 1

To disable it just type:

Set-MpPreference -PUAProtection 0


RE: Windows Defender: how to turn ON PUA protection (Powershell) - Lano - 29 December 18

(29 December 18, 18:49)JM Security Wrote: Hi guys, WD is improved very much in newer releases. But how can we enable PUA? Simply open Powershell and type this:

Set-MpPreference -PUAProtection 1
To disable it just type:
Set-MpPreference -PUAProtection 0

I have some questions.
  1. - Previously Powershell was needed run in elevated mode, has it changed now?
  2. - Previously, was  also possible to use the so-called "audit mode", is this mode no longer available?

1. Open an elevated PowerShell.
2. Enter the command below you want to use into the elevated PowerShell, and press Enter.

(Disable Windows Defender PUA protection - Default settings)
 Set-MpPreference -PUAProtection 0
or
 Set-MpPreference -PUAProtection Disabled

OR

(Enable Windows Defender PUA protection)
 Set-MpPreference -PUAProtection 1
or
 Set-MpPreference -PUAProtection Enabled

OR

(Audit Mode - will detect PUAs, but will not block them)
 Set-MpPreference -PUAProtection 2
or
 Set-MpPreference -PUAProtection AuditMode