tag:github.com,2008:https://github.com/SysAdminDoc/DefenderControl/releasesRelease notes from DefenderControl2026-04-24T20:27:01Ztag:github.com,2008:Repository/1184952962/v3.2.12026-04-24T20:27:19ZDefenderControl v3.2.1<h2>DefenderControl v3.2.1 - PowerShell 7 compatibility</h2>
<h3>Fixed</h3>
<ul>
<li>Running the script from PowerShell 7 (<code>pwsh.exe</code>) no longer errors out with "Wrong PowerShell Edition". The script now detects PS 7 / Core and auto-relaunches itself under Windows PowerShell 5.1 (<code>powershell.exe</code>) with all original arguments preserved.</li>
<li>CLI mode waits synchronously so stdout / stderr / exit codes return to the caller.</li>
<li>GUI mode fires a new window.</li>
<li>If the caller isn't already elevated, the re-launch also handles UAC in the same step.</li>
</ul>
<h3>Install</h3>
<p>Download <code>DefenderControl.ps1</code>, verify SHA256 against <code>SHA256SUMS.txt</code>, run (it works from both <code>powershell.exe</code> and <code>pwsh.exe</code> now).</p>
<h3>SHA256</h3>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="698e240b0c422d64220615ca65dcd5c1a14112644fb90d1edad9d2c96e523693 DefenderControl.ps1"><pre class="notranslate"><code>698e240b0c422d64220615ca65dcd5c1a14112644fb90d1edad9d2c96e523693 DefenderControl.ps1
</code></pre></div>SysAdminDoctag:github.com,2008:Repository/1184952962/v3.2.02026-04-24T19:50:56ZDefenderControl v3.2.0<h2>DefenderControl v3.2.0</h2>
<p>First release with a CLI surface, machine-checked firewall integrity, audit manifests, and a pass/fail verification suite.</p>
<h3>Added</h3>
<ul>
<li><strong>CLI mode</strong> with <code>-Mode Status | Health | Verify | Manifest</code> for read-only automation</li>
<li><strong>-Json</strong> emits stable JSON for scripting pipelines</li>
<li><strong>Stable CLI exit codes</strong>: <code>0</code> success, <code>1</code> partial, <code>2</code> tamper-blocked, <code>3</code> safe-mode-needed, <code>4</code> usage-error, <code>5</code> verify-fail</li>
<li><strong>Firewall integrity guard</strong>: Disable + Enable snapshot firewall profile state (Domain/Private/Public enabled) plus mpssvc / BFE service state before the first change and verify after the last change. Any divergence is logged as an ERROR. The "firewall untouched" promise is now machine-checked, not just documented.</li>
<li><strong>Third-party AV pre-flight</strong>: Phase 0 of Disable queries <code>root\SecurityCenter2\AntivirusProduct</code> and warns when no non-Microsoft AV is registered.</li>
<li><strong>Undo / audit manifest</strong>: every Disable/Enable persists a JSON manifest to <code>%ProgramData%\DefenderControl\manifests\<op>-<ts>.json</code> with schema version, timestamps, firewall before/after, third-party AV list, and phases completed.</li>
<li><strong>Verification suite</strong>: <code>-Mode Verify -Expect Enabled|Disabled|Auto</code> asserts the current state against an expected shape with per-check pass/fail reporting in JSON or human-readable form.</li>
<li><strong>EICAR synthetic detection test</strong> (opt-in via <code>-Mode Verify -Eicar -Force</code>): writes the standard EICAR AV-signature test string, waits 2.5s, reports whether Defender quarantined it, cleans up regardless of outcome.</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Self-elevation forwards all original arguments through the UAC re-launch so CLI flags survive elevation.</li>
<li>WPF assemblies are skipped entirely in CLI mode for faster startup.</li>
<li>README hero image referenced a deleted asset (removed).</li>
</ul>
<h3>Install</h3>
<p>Download <code>DefenderControl.ps1</code>, verify SHA256 against <code>SHA256SUMS.txt</code>, right-click -> Run with PowerShell (it will self-elevate).</p>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="sha256sum -c SHA256SUMS.txt"><pre class="notranslate"><code>sha256sum -c SHA256SUMS.txt
</code></pre></div>
<h3>SHA256</h3>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="c3b0c3a35af52eaeca1ca05057daf41a472eee4ca3b6d4a1648901be9ad1adb5 DefenderControl.ps1"><pre class="notranslate"><code>c3b0c3a35af52eaeca1ca05057daf41a472eee4ca3b6d4a1648901be9ad1adb5 DefenderControl.ps1
</code></pre></div>SysAdminDoctag:github.com,2008:Repository/1184952962/v3.1.02026-04-13T16:44:35Zv3.1.0<p>Release v3.1.0</p>SysAdminDoc