File tree Expand file tree Collapse file tree 2 files changed +5
-1
lines changed
src/playbook/Executables/AtlasDesktop/7. Security/Mitigations Expand file tree Collapse file tree 2 files changed +5
-1
lines changed Original file line number Diff line number Diff line change @@ -47,7 +47,7 @@ reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management
4747powershell -NonI -NoP -C " $proc = (Get-CimInstance Win32_Processor | Select-Object -First 1).Name; $env:CPU = if ($proc | sls 'Intel' -Quiet) {'0'} elseif ($proc | sls 'AMD' -Quiet) {'64'}"
4848if " %CPU% " neq " " (
4949 reg add " HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v " FeatureSettingsOverride" /t REG_DWORD /d " %CPU% " /f > nul
50- )
50+ )
5151
5252:: Enable Structured Exception Handling Overwrite Protection (SEHOP)
5353reg add " HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\kernel" /v " DisableExceptionChainValidation" /t REG_DWORD /d " 0" /f > nul
@@ -79,6 +79,8 @@ reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager" /v "ProtectionMo
7979:: Enable for Hyper-V
8080reg add " HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Virtualization" /v " MinVmVersionForCpuBasedMitigations" /t REG_SZ /d " 1.0" /f > nul
8181
82+ if " %~1 " == " /silent" exit /b
83+
8284echo Finished, please reboot your device for changes to apply.
8385pause
8486exit /b
Original file line number Diff line number Diff line change @@ -45,6 +45,8 @@ reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager" /v "ProtectionMo
4545:: Default Hyper-V Settings
4646reg delete " HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Virtualization" /v " MinVmVersionForCpuBasedMitigations" /f > nul 2 >& 1
4747
48+ if " %~1 " == " /silent" exit /b
49+
4850echo Finished, please reboot your device for changes to apply.
4951pause
5052exit /b
You can’t perform that action at this time.
0 commit comments