@@ -120,22 +120,6 @@ param
120120 $ProxyCredentials = [System.Management.Automation.PSCredential ]::Empty
121121)
122122
123- # Fixing Certain Platform Environments --------------------------------
124- $AutoDetectPlatform = " "
125- $OutputPath = $PSScriptRoot
126-
127- # Microsoft Defender ATP - Live Response
128- # $PSScriptRoot is empty or contains path to Windows Defender
129- if ($OutputPath -eq " " -or $OutputPath.Contains (" Windows Defender Advanced Threat Protection" ))
130- {
131- $AutoDetectPlatform = " MDATP"
132- # Setting output path to easily accessible system root, e.g. C:
133- if ($OutputPath -eq " " )
134- {
135- $OutputPath = " $ ( $env: ProgramData ) \thor"
136- }
137- }
138-
139123# #####################################################################
140124# Presets -------------------------------------------------------------
141125# #####################################################################
@@ -251,6 +235,25 @@ Signature file is older than 60 days
251235\\Our-Custom-Software\\v1.[0-9]+\\
252236"@
253237
238+ # Fixing Certain Platform Environments --------------------------------
239+ $AutoDetectPlatform = " "
240+ if ($OutputPath -eq " " )
241+ {
242+ $OutputPath = $PSScriptRoot
243+ }
244+
245+ # Microsoft Defender ATP - Live Response
246+ # $PSScriptRoot is empty or contains path to Windows Defender
247+ if ($OutputPath -eq " " -or $OutputPath.Contains (" Windows Defender Advanced Threat Protection" ))
248+ {
249+ $AutoDetectPlatform = " MDATP"
250+ # Setting output path to easily accessible system root, e.g. C:
251+ if ($OutputPath -eq " " )
252+ {
253+ $OutputPath = " $ ( $env: ProgramData ) \thor"
254+ }
255+ }
256+
254257# Global Variables ----------------------------------------------------
255258$global :NoLog = $NoLog
256259
0 commit comments