From c495757f40227c83b7795a99892750de2e58ed29 Mon Sep 17 00:00:00 2001 From: JasonPhang98 Date: Sun, 19 Jan 2025 18:19:22 +0800 Subject: [PATCH] fixing command error --- yml/OSBinaries/SystemSettingsAdminFlow.yml | 3 --- 1 file changed, 3 deletions(-) diff --git a/yml/OSBinaries/SystemSettingsAdminFlow.yml b/yml/OSBinaries/SystemSettingsAdminFlow.yml index 3f82666..60adb4f 100644 --- a/yml/OSBinaries/SystemSettingsAdminFlow.yml +++ b/yml/OSBinaries/SystemSettingsAdminFlow.yml @@ -4,9 +4,6 @@ Description: SystemSettingsAdminFlows.exe is responsible for the administrator p Author: 'Jason Phang Vern-Onn' Created: 2025-01-19 Commands: - - Command: C:\Windows\System32\SystemSettingsFlowAdmin.exe Defender DisableEnhancedNotifications 1 - - Command: C:\Windows\System32\SystemSettingsFlowAdmin.exe Defender SubmitSamplesConsent 0 - - Command: C:\Windows\System32\SystemSettingsFlowAdmin.exe Defender SpynetReporting 0 - Command: C:\Windows\System32\SystemSettingsFlowAdmin.exe Defender RTP 1 Description: SystemSettingsFlowAdmin.exe can be abused to modify Windows Defender settings, such as disabling enhanced notifications, submission consent, and real-time protection. Usecase: Attackers can exploit this binary to disable critical Windows Defender settings and bypass security measures, enabling malware execution.