Tag Archives: edr

Bitdefender Endpoint Security Tools remote deployment

Setting this https://www.bitdefender.com/business/support/en/77209-157498-install-security-agents—use-cases.html#UUID-ce63a5eb-e064-6715-2884-c2ca4377f3aa Then https://www.bitdefender.com/business/support/en/77209-157497-install-security-agents—standard-procedure.html#id337204 For Active Directory machines use these syntaxes: username@domain.com and domain\username. To make sure that entered credentials will work, add them in both forms (username@domain.com and domain\username).

Posted in Gravityzone | Tagged , , , , , , , | Leave a comment

Enable Excel Macro

Macro can be block by Fileless Attack Defense if it trigger powershell.exe Fix by add command in Exclusions such as below command “C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe” -ExecutionPolicy Bypass -WindowStyle Hidden -Command “Get-Process EXCEL ………. | Stop-Process -Force” Then when it execute this command … Continue reading

Posted in Gravityzone | Tagged , , , , , , | Leave a comment

Bitdefender EDR PoC Step

As I got Lots of request on How to PoC EDR then this is my write up we will use this Github to test https://github.com/redcanaryco/invoke-atomicredteam/wiki/Installing-Invoke-AtomicRedTeam First add exclusion on Gravityzone to C:\AtomicRedTeam Open Powershell to create folder mkdir C:\AtomicRedTeamcd C:\AtomicRedTeam … Continue reading

Posted in Gravityzone | Tagged , , , , | Leave a comment

Install Bindefender Best Agent on Windows 7 Service Pack 1 and Windows 2008r2

Prerequisite For Windows 7 Service Pack 1 download here https://learn.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist?view=msvc-170#latest-supported-redistributable-version or https://aka.ms/vs/17/release/vc_redist.x86.exe /////////////////////////////////////////////////////////////////////////////////////////////////////////////ONLY IF you are using Windows 7 need to install these patchKB3033929KB4490628KB4474419KB4536952KB4534310///////////////////////////////////////////////////////////////////////////////////////////////////////////// Prerequisite For Windows server 2008r2 https://learn.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist?view=msvc-170#latest-supported-redistributable-version or https://aka.ms/vc14/vc_redist.x64.exe https://support.microsoft.com/en-us/topic/update-to-enable-tls-1-1-and-tls-1-2-as-default-secure-protocols-in-winhttp-in-windows-c4bd73d2-31d7-761e-0178-11268bb10392#bkmk_easy https://download.microsoft.com/download/0/6/5/0658B1A7-6D2E-474F-BC2C-D69E5B9E9A68/MicrosoftEasyFix51044.msi http://microsoft.com/en-us/download/details.aspx?id=17718 https://www.microsoft.com/en-us/download/details.aspx?id=46083 Or If you cannot … Continue reading

Posted in Gravityzone | Tagged , , , , , , , , | Leave a comment

Gravityzone Policy Best Practices for Client/Server

For EPP/EDR https://techzone.bitdefender.com/en/tech-papers/gravityzone-best-practices.html Agent General settings within the policy allow you to manage user interface display options, password protection, proxy settings, power user settings, communication options, and update preferences for the selected endpoints. Set uninstall password: This prevents users with … Continue reading

Posted in Gravityzone | Tagged , , , , , | Leave a comment