search

0x6d69636b / windows_hardening

HardeningKitty and Windows Hardening Settings
MIT License
2.35k stars 313 forks source link

Starting Category Microsoft Defender Exploit Guard #134

Closed 4D5A closed 1 year ago

4D5A commented 1 year ago

This issue was noted in version 0.9.0.

When running Invoke-HardeningKitty -EmojiSupport -Mode Audit -Log -Report -Backup after running Invoke-HardeningKitty -EmojiSupport -Mode HailMary -Log -Report -Backup -SkipRestorePoint, the function returns the following message for items in the "Starting Category Microsoft Defender Exploit Guard" section.

Method invocation failed because [System.Int32] does not contain a method named 'Split'.

This occurred on a clean installation of Windows 10 Enterprise 21H2 generated using Hyper-V Quick Create.

image

0x6d69636b commented 1 year ago

Oh I see the problem, I added checks for Defender settings configured with Intune and the HailMary mode does not generate the expected format of the registry key. I'll fix that in a minute or two ;-)

0x6d69636b commented 1 year ago

Now, I added a try...catch statement around the ASR rules (Intune) parsing and added exceptions for Intune settings into the registry module of HailMary. Could you please retest it?

4D5A commented 1 year ago

Yes, that fixed the issue. Thank you.