


I obviously have a lot to learn, so if you have a lot of patience - feel free. I might add - why has Microsoft not added these by default, even if they are not active. Thanks for your patience, and if you can share your scripts I would be truly grateful. Since Endpoint Analytics proactive remediation is not an option in a non joined scenario I need to run the PowerShell scripts within Intune to force the issue. However most of mine are not and are managed - yeah I know - don't say it.

This is probably not a problem for most of you as your systems are joined to a domain ASR - Block persistence through WMI Event subscription. Really stupid question - has anybody written detection and remediation PowerShell scripts for the followingģ.
