Timeline for Windows Defender - How can I temporarily disable calls to MpCmdRun -GetDeviceTicket using registry editor
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 17, 2022 at 13:02 | history | edited | Vittorio Passuello-Dussault | CC BY-SA 4.0 |
added 145 characters in body
|
| Nov 17, 2022 at 13:01 | comment | added | Vittorio Passuello-Dussault |
I also know that if I go under Windows Security > Protection Updates and click on Check for updates, the GetDeviceTicket is called
|
|
| Nov 17, 2022 at 12:59 | comment | added | Vittorio Passuello-Dussault |
I don't know how I can get the name of the app that makes the call. I am using mpcmdrun.exe -GetFiles to get the logs and then I browse the file called MpCmdRun-NetworkService.log in order to get the log of the call to mpcmdrun GetDeviceTicket -AccessKey ...
|
|
| Nov 17, 2022 at 12:36 | comment | added | anon | Can you whitelist the App that makes the call? That would be the best way. | |
| S Nov 17, 2022 at 12:34 | review | First questions | |||
| Nov 17, 2022 at 12:49 | |||||
| S Nov 17, 2022 at 12:34 | history | asked | Vittorio Passuello-Dussault | CC BY-SA 4.0 |