Recent Comments
No comments to show.Archives
Categories
Tag Archives: edr
Bitdefender Endpoint Security Tools remote deployment
Setting this https://www.bitdefender.com/business/support/en/77209-157498-install-security-agents—use-cases.html#UUID-ce63a5eb-e064-6715-2884-c2ca4377f3aa Then https://www.bitdefender.com/business/support/en/77209-157497-install-security-agents—standard-procedure.html#id337204 For Active Directory machines use these syntaxes: username@domain.com and domain\username. To make sure that entered credentials will work, add them in both forms (username@domain.com and domain\username).
Posted in Gravityzone
Tagged AD, bitdefender, edr, EPP, installation, join AD, MDR, remote
Leave a comment
Enable Excel Macro
Macro can be block by Fileless Attack Defense if it trigger powershell.exe Fix by add command in Exclusions such as below command “C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe” -ExecutionPolicy Bypass -WindowStyle Hidden -Command “Get-Process EXCEL ………. | Stop-Process -Force” Then when it execute this command … Continue reading
Posted in Gravityzone
Tagged bitdefender, edr, enable excel macro, enable macro, EPP, gravityzone, MDR
Leave a comment
Bitdefender EDR PoC Step
As I got Lots of request on How to PoC EDR then this is my write up we will use this Github to test https://github.com/redcanaryco/invoke-atomicredteam/wiki/Installing-Invoke-AtomicRedTeam First add exclusion on Gravityzone to C:\AtomicRedTeam Open Powershell to create folder mkdir C:\AtomicRedTeamcd C:\AtomicRedTeam … Continue reading
Install Bindefender Best Agent on Windows 7 Service Pack 1 and Windows 2008r2
Prerequisite For Windows 7 Service Pack 1 download here https://learn.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist?view=msvc-170#latest-supported-redistributable-version or https://aka.ms/vs/17/release/vc_redist.x86.exe /////////////////////////////////////////////////////////////////////////////////////////////////////////////ONLY IF you are using Windows 7 need to install these patchKB3033929KB4490628KB4474419KB4536952KB4534310///////////////////////////////////////////////////////////////////////////////////////////////////////////// Prerequisite For Windows server 2008r2 https://learn.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist?view=msvc-170#latest-supported-redistributable-version or https://aka.ms/vc14/vc_redist.x64.exe https://support.microsoft.com/en-us/topic/update-to-enable-tls-1-1-and-tls-1-2-as-default-secure-protocols-in-winhttp-in-windows-c4bd73d2-31d7-761e-0178-11268bb10392#bkmk_easy https://download.microsoft.com/download/0/6/5/0658B1A7-6D2E-474F-BC2C-D69E5B9E9A68/MicrosoftEasyFix51044.msi http://microsoft.com/en-us/download/details.aspx?id=17718 https://www.microsoft.com/en-us/download/details.aspx?id=46083 Or If you cannot … Continue reading
Posted in Gravityzone
Tagged 2008r2, bitdefender, edr, gravityzone, Prerequisite, windows, windows 2008r2, windows 7, ติดตั้ง
Leave a comment
Gravityzone Policy Best Practices for Client/Server
For EPP/EDR https://techzone.bitdefender.com/en/tech-papers/gravityzone-best-practices.html Agent General settings within the policy allow you to manage user interface display options, password protection, proxy settings, power user settings, communication options, and update preferences for the selected endpoints. Set uninstall password: This prevents users with … Continue reading