Powershell Code

powershell

Firewall:

Enable-NetFirewallRule -DisplayGroup "Windows Firewall" Disable-NetFirewallRule -DisplayGroup "Windows Firewall" Enable-NetFirewallRule -DisplayGroup "Windows Firewall" -Profile "Domain" Get-NetFirewallProfile

Attack Surface Reduction:

attack surface

Set-MpPreference -AttackSurfaceReductionRules_Ids "*" -AttackSurfaceReductionRules_Actions Enabled

This will enable all ASR rules. If you want to enable specific rules only, you can replace "*" with the specific rule IDs.

For example, to enable only the "Block executable content from email client and webmail" and "Block Office applications from creating child processes" rules:

$ruleIds = "3001","3002"

Set-MpPreference -AttackSurfaceReductionRules_Ids $ruleIds -AttackSurfaceReductionRules_Actions Enabled

Start-MpScan -ScanType FullScan

Defender:

defender

Start-MpScan -ScanType FullScan Start-MpScan -ScanType QuickScan Start-MpScan -ScanType CustomScan -CustomScanPath "C:\example\folder" Get-MpThreat -ThreatType All -ThreatStatus Active

Shutdown:

You can use the command "Shutdown /s /t 0" in PowerShell to immediately shut down the computer. The "/s" flag indicates that the action is a shutdown, and the "/t 0" flag sets the timer for the action to 0 seconds.

New User:

For example, to add a user named "JohnDoe" with the password "Pa$$w0rd" to the "Users" group, you can use the following command:

New-LocalUser -Name "JohnDoe" -Password (ConvertTo-SecureString -AsPlainText "Pa$$w0rd" -Force) -MemberOf "Users"