On Windows 10 (19044) administrator is required to run this script wether this change is present or not.
Before this change you could not terminate MsMpEng or edit the registry values.
Is this expected behaviour or perhaps specific to my Windows 10 version?
Now you can, as well as LSASS etc with no additional requirements.
Still have issues writing to memory, perhaps there are additional permissions needed
On Windows 10 (19044) administrator is required to run this script wether this change is present or not. Before this change you could not terminate MsMpEng or edit the registry values. Is this expected behaviour or perhaps specific to my Windows 10 version? Now you can, as well as LSASS etc with no additional requirements. Still have issues writing to memory, perhaps there are additional permissions needed