I am trying to turn off behavior monitoring with MS Defender. I am using the command given here. https://learn.microsoft.com/en-us/defender-endpoint/behavior-monitor#modify-the-behavior-monitoring-settings-by-using-powershell
I run Set-MpPreference -DisableBehaviorMonitoring 1 to turn it off. Then I check with Get-MpComputerStatus | Format-Table BehaviorMonitorEnabled. Even after a reboot it says it is still enabled.
#Trying to turn of behavior monitoring with MS Defender
dark bough
red forum
(OP has been trying to solve some performance issues with Defender in the C# server, they're not making malware)
ashen sigil
tamper protection most likely
Enabled if (Get-MpComputerStatus).IsTamperProtected returns true
toggle it off in the GUI and then your Set-MpPreference commands should work
dark bough
I will try turning off tamper protection and see if I can then turn off behavior monitoring
dark bough
toggle it off in the GUI and then your `Set-MpPreference` commands should work
turning off tamper protection then allowed me to turn of behavior monitoring.
dark bough
yeah...
dark bough
is RealTime scanning off as well?
Real time protection is on
How bad is it to turn off "Smart App Control" seeing how I can't put it back in evaluation mode
And smart app control keeps blocking linqpad from loading the dlls
Maybe smart app control is the culprit of the slow speeds?
I just hate that you have to reinstall windows to change it
f it, I'll turn it off
Okay, that fixed it
cloud-delivered protection is still on as well