2 Commits

Author SHA1 Message Date
Samirbous 9d28f642d9 Fix ActiveStore QoS policy detection via WbemContext PolicyStore.
Plain WMI ExecQuery missed ActiveStore policies from New-NetQosPolicy and EDRChoker; enumerate ActiveStore and GPO:localhost with SWbemNamedValueSet and align status checks with Get-NetQosPolicy.
2026-06-08 16:54:41 +01:00
sbousseaden 52e684d55b EDRUnChoker: fileless WMI defense against EDRChoker QoS throttling 2026-06-08 11:50:58 +01:00