TestimoX

API Reference

Class

DefenderPolicyReader

Namespace ADPlayground.Gpo
Assembly ADPlayground
Modifiers static

Extracts Microsoft Defender policy details from a registry.pol.

Inheritance

  • Object
  • DefenderPolicyReader

Methods

public static DefenderPolicyInfo FromPol(PolFile pol, String domainName, Guid gpoId) #
Returns: DefenderPolicyInfo

Reads Defender policy entries from pol and returns a summary if present.

Parameters

pol ADPlayground.Gpo.GpoLocal.PolFile requiredposition: 0
Parsed registry.pol model.
domainName System.String requiredposition: 1
Domain DNS name.
gpoId System.Guid requiredposition: 2
GPO identifier.

Returns

Defender policy info or null when no relevant settings are found.