RT @theluemmel
Fetch Defender exclusions from Intune managed devices as non-admin user:

Export management log files
Extract cab file
Review MDMDiagHtmlReport.html
Search for "Excluded Processes" and "Excluded Paths"

Cherio
#pentest #redteam #tipswednesday #thankmelater