defender | Role and permission management framework

We have a .net core 1.1 C# app that we are trying to debug in Visual Studio 2019 16.11.7. The project is made up of 2 other projects (all debug fine) + one project which fails to debug. The project was working fine until something was updated somewhere and now it throws this error.

Before removing &reinstalling Visual Studio 2019, I did a full repair on Visual Studio. That didn't resolve the issue either.

I have tried all the below but still get this error msvsmon.exe unexpectedly exited. Debugging will be aborted

1. removed Visual Studio 2019 and reinstalled Visual Studio 2019
2. deleted the vs folder in the project
3. set the Project debug target to x86
4. Set a windows defender firewall exemption for both 'devexe' and 'the x64 remote debugger msvsmon.exe' file
5. changed the project to debug with 'Managed Compatibility Mode' (now Disabled)
6. cleared bin folder under debug & release
7. setting IIS to debug in 32 mode (but since removed this)
8. Added 127.0.0 to hosts file (but since removed this)
9. Installed both 64 bit and 32 bit .Net core 1.1.13 runtimes & SDKS from https://dotnet.microsoft.com/download/dotnet/1.1
10. updated global.json

I'm experimenting with some options for an endpoint pen-testing lab for a Windows environment, and Docker seems like a pretty light-weight and easily configurable option. However, upon testing Windows Defender within this setup I'm faced with errors and every help thread answer I've found on it has just resulted in more errors. Is running Windows Defender in a docker container not doable?

What I've tried:

Ran a docker Windows container:

Working on a script to get the status of Windows Defender components. Running into a challenge looping through the results from Get-MpComputerStatus as I'm wanting to write out which components are enabled and disabled.

The issue that I'm running into is I'm not able to get the specific value from the PSOBJECT and only get everything.

I'm looking into using Microsoft Defender for Cloud to use with Blob Storage.

Ideally I'd like to:

1. Upload to Storage
2. Have Defender for cloud scan for viruses
3. If there's an issue, remove it
4. If there's NOT an issue, process it further.

Step 3 is easy. Workflow automation and can easily trigger such events.

The bit I can't work out is: what if the scan goes through fine?

I've looked in Logic Apps and can't find a 'successfully scanned' trigger.

When will the scan occur? As soon as uploaded, or just on a schedule?

Is there anything I can go on (metadata?) to know a blob has been scanned and is good to go?

I have written this PowerShell instruction to add the given path to the list of Microsoft Defender exclusions in a new PowerShell process (with elevated permissions):

For security reasons I do have to enable Azure Defender in the ASC for all resource types. Since we do have a lot of different subscriptions within Azure and the number is increasing we do have to configure an Azure Policy to enforce that.

There already is an option to enable the Azure Defender for all resources, but I have not found anything useful in the documentation to enable this via an Azure Policy.

I have two solutions in my mind which would match my requirements. The first would be, that we enable the Azure Defender for all resource types and the other would be that we enable only specific resource types (for me just the resource type for the open source relational databases is currently relevant).

I only found that initiative that deploys the Azure Defender to the database server, but it will not activate that option within my Azure Security Center. Are there any other documentations from Microsoft how to accomplishing that?

I have tried different for loops trying to iterate through this JSON and I cant figure out how to do it. I have a list of numbers and want to compare it to the "key" values under each object of "data" (For example, Aatrox, Ahri, Akali, and so on) and if the numbers match store the "name" value in another list.

Example: listOfNumbers = [266, 166, 123, 283]

266 and 166 would match the "key" in the Aatrox and Akshan objects respectively so I would want to pull that name and store it in a list.

I understant this JSON is mostly accessed by key values rather than being indexed so Im not sure how I would iterate through all the "data" objects in a for loop(s).

JSON im referencing:

I am pulling my hair on this one.

I have 2 Dataframes:

df1 holds data for Players with their position (zone) (Forward, Midfield or Defender) and some of their

game stats.

I have a script to list and check if multiple Anti-Virus are installed on a machine which is working fine. Is there a better way to make it more simpler that having a long code?