Defender is enabled in win10 machine (Proxmox)
- Dominant language
- HTML
- Stars
- 5k
- Forks
- 1k
- PR merge metrics
- No merged PRs in 30d
Description
* Operating System Version: Debian
* Deploying via : **Proxmox**
* Vagrant Version (if applicable): not applicable (proxmox using packer+terraform+ansible)
Building from master (commit 8fffa0e9840fc6f2a1bea7844a0ec5a6cd3754b8)
### Description of the issue:
While configure the win10 host with Ansible, Red Team toolkit is not installed:
> {"changed": true, "cmd": ".\\install-redteam.ps1", "delta": "0:00:11.576824", "end": "2022-01-18 18:56:50.010227", "failed_when_result": false, "msg": "non-zero return code", "rc": 1, "start": "2022-01-18 18:56:38.433403", "stderr": "The scheduled task 'Invoke-CommandAs Task' failed with result code 1.\r\nAt C:\\vagrant\\scripts\\Invoke-CommandAs.ps1:28 char:9\r\n+ throw \"The scheduled task '$TaskName' failed with result code ...\r\n+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\r\n + CategoryInfo : OperationStopped: (The scheduled t... result code 1.:String) [], RuntimeException\r\n + FullyQualifiedErrorId : The scheduled task 'Invoke-CommandAs Task' failed with result code 1.", "stderr_lines": ["The scheduled task 'Invoke-CommandAs Task' failed with result code 1.", "At C:\\vagrant\\scripts\\Invoke-CommandAs.ps1:28 char:9", "+ throw \"The scheduled task '$TaskName' failed with result code ...", "+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~", " + CategoryInfo : OperationStopped: (The scheduled t... result code 1.:String) [], RuntimeException", " + FullyQualifiedErrorId : The scheduled task 'Invoke-CommandAs Task' failed with result code 1."], "stdout": "[18:56] Installing Red Team Tooling...\n", "stdout_lines": ["[18:56] Installing Red Team Tooling..."]}
When I tried to run Red Team toolkit I found out that Red Team toolkit is detected and deleted by Defender AV. So I think that Packer configuration do not disable Defender properly.
Contributor guide
Assessment
This issue has not been assessed yet.