{
    "name" : "Windows Defender (GPO)",
    "description" : "This module Desactivate somes Windows Defender functionnallity like GPO does.",
    "actions" :
    [
        {
            "_comment" : "Disable Spynet Reporting",
            "action" : "AddRegKey",
            "path" : "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows Defender\\Spynet",
            "key" : "SpyNetReporting",
            "value" : "0"
        },
        {
            "_comment" : "Disable sample submission to Microsoft",
            "action" : "AddRegKey",
            "path" : "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows Defender\\Spynet",
            "key" : "SubmitSamplesConsent",
            "value" : "2"
        },
        {
            "_comment" : "Do not report infection informations to Microsoft",
            "action" : "AddRegKey",
            "path" : "HKLM:\\SOFTWARE\\Policies\\Microsoft\\MRT",
            "key" : "DontReportInfectionInformation",
            "value" : "1"
        },
        {
            "_comment" : "Do not allow setting override for Spynet reporting",
            "action" : "AddRegKey",
            "path" : "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows Defender\\Spynet",
            "key" : "LocalSettingOverrideSpynetReporting",
            "value" : "0"
        }
    ]
}