mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-17 11:23:45 +00:00
add create folder step in run detection test
This commit is contained in:
@ -10,7 +10,7 @@ ms.pagetype: security
|
|||||||
ms.author: macapara
|
ms.author: macapara
|
||||||
author: mjcaparas
|
author: mjcaparas
|
||||||
ms.localizationpriority: medium
|
ms.localizationpriority: medium
|
||||||
ms.date: 11/06/2017
|
ms.date: 09/07/2018
|
||||||
---
|
---
|
||||||
|
|
||||||
# Run a detection test on a newly onboarded Windows Defender ATP machine
|
# Run a detection test on a newly onboarded Windows Defender ATP machine
|
||||||
@ -26,7 +26,8 @@ ms.date: 11/06/2017
|
|||||||
|
|
||||||
Run the following PowerShell script on a newly onboarded machine to verify that it is properly reporting to the Windows Defender ATP service.
|
Run the following PowerShell script on a newly onboarded machine to verify that it is properly reporting to the Windows Defender ATP service.
|
||||||
|
|
||||||
1. Open an elevated command-line prompt on the machine and run the script:
|
1. Create a folder: 'C:\test-WDATP-test'.
|
||||||
|
2. Open an elevated command-line prompt on the machine and run the script:
|
||||||
|
|
||||||
a. Go to **Start** and type **cmd**.
|
a. Go to **Start** and type **cmd**.
|
||||||
|
|
||||||
@ -34,7 +35,7 @@ Run the following PowerShell script on a newly onboarded machine to verify that
|
|||||||
|
|
||||||

|

|
||||||
|
|
||||||
2. At the prompt, copy and run the following command:
|
3. At the prompt, copy and run the following command:
|
||||||
|
|
||||||
```
|
```
|
||||||
powershell.exe -NoExit -ExecutionPolicy Bypass -WindowStyle Hidden (New-Object System.Net.WebClient).DownloadFile('http://127.0.0.1/1.exe', 'C:\test-WDATP-test\invoice.exe');Start-Process 'C:\test-WDATP-test\invoice.exe'
|
powershell.exe -NoExit -ExecutionPolicy Bypass -WindowStyle Hidden (New-Object System.Net.WebClient).DownloadFile('http://127.0.0.1/1.exe', 'C:\test-WDATP-test\invoice.exe');Start-Process 'C:\test-WDATP-test\invoice.exe'
|
||||||
|
Reference in New Issue
Block a user