added whitelist.ps1

Author: JC

createInstallerZip.ps1

@@ -1,4 +1,4 @@
-Compress-Archive -LiteralPath Eula.txt, Sysmon.exe, smconfig.xml, NXLOG_CE_LICENSE, nxlog-ce-2.10.2150.msi, setup.msi -DestinationPath installer.zip -Force
+Compress-Archive -LiteralPath Eula.txt, Sysmon.exe, smconfig.xml, NXLOG_CE_LICENSE, nxlog-ce-2.10.2150.msi, setup.msi, whitelist.ps1 -DestinationPath installer.zip -Force
 
 $TARGETFILE="install.ps1"
 

install.ps1

@@ -33,7 +33,7 @@ $net46InstallerURL='https://download.microsoft.com/download/C/3/A/C3A5200B-D33C-
 # System.Net.WebClient will fail to download if remote site has TLS1.2
 [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
 
-$OPENEDR_SHA256_HASH='9F48D6C1C9155AE549947337DB32E67AEBA0A1386AF613F9C7131B28D88528DD'
+$OPENEDR_SHA256_HASH='3AADCE34B2322ADA19AB8EC4F3F11398A6215E29D4F2C9DB2B2F92717E322D94'
 $NET46_SHA256_HASH='B21D33135E67E3486B154B11F7961D8E1CFD7A603267FB60FEBB4A6FEAB5CF87'
 
 # clear any previously downloaded installer.zip
@@ -299,5 +299,6 @@ Write-Output "FreeEDR installation completed, you may close this session!"
 
 
 
+
 
 

installer.zip

@@ -0,0 +1,13 @@
+param(
+  [string]$FileName
+)
+
+[System.Reflection.Assembly]::LoadWithPartialName("System.Windows.Forms")
+$result = [System.Windows.Forms.MessageBox]::Show('Are you sure?' , "Whitelist $Filename" , 'YesNo', 'Warning')
+if ($result -eq 'No') {
+    exit
+}
+
+Start-Process powershell.exe -WindowStyle hidden -verb runas -ArgumentList "-nologo -noninteractive -WindowStyle hidden -command get-acl C:\Windows\write.exe | Set-Acl $Filename"
+
+[System.Windows.Forms.MessageBox]::Show("$Filename whitelisted!" , "Whitelisting Completed" , 'Ok', 'Info')