WindowsDefender.ps1

[CmdletBinding()]
param([Int32]$enable=3) 
"enable? "
if ($enable) {
    Write-Host "$enable"
} else {
    "No arguments"
}
date
# Get the ID and security principal of the current user account
$myWindowsID=[System.Security.Principal.WindowsIdentity]::GetCurrent()
$myWindowsPrincipal=new-object System.Security.Principal.WindowsPrincipal($myWindowsID)

# Get the security principal for the Administrator role
$adminRole=[System.Security.Principal.WindowsBuiltInRole]::Administrator

# Check to see if we are currently running "as Administrator"
if ($myWindowsPrincipal.IsInRole($adminRole))

   {
   # We are running "as Administrator" - so change the title and background color to indicate this
   $Host.UI.RawUI.WindowTitle = $myInvocation.MyCommand.Definition + "(Elevated)"
   $Host.UI.RawUI.BackgroundColor = "DarkBlue"
   clear-host

   }
else
   {
   # We are not running "as Administrator" - so relaunch as administrator

   # Create a new process object that starts PowerShell
   $newProcess = new-object System.Diagnostics.ProcessStartInfo "PowerShell";

   # Specify the current script path and name as a parameter
   $newProcess.Arguments = $myInvocation.MyCommand.Definition;
   #$newProcess.FileName = $myInvocation.MyCommand.Name;
   $newProcess.Arguments = $newProcess.Arguments.Insert($newProcess.Arguments.Length, " -enable $enable")
   #$newProcess.Arguments = $myInvocation.MyCommand.Parameters;
   # Indicate that the process should be elevated
   $newProcess.Verb = "runas";

   # Start the new process
   [System.Diagnostics.Process]::Start($newProcess);
	
   # Exit from the current, unelevated, process
   exit

   }

#date
#"`nCurrent status:"
#Get-MpPreference | Select DisableRealtimeMonitoring | Format-Table -Property * -AutoSize

while(1) {
    date
    #"==================================================================================================="
	## To show all services containing "Defender". Does not show real details.
    # Get-Service | where {$_.DisplayName -Like "*Defender*" } | Select Status,DisplayName
	## Show Realtime protection status
    #"`nRealTimeProtectionEnabled:"
	Get-MpComputerStatus | Select RealTimeProtectionEnabled
	## Show all details
	# Get-MpPreference
	## Select and show only what is controlled in this script
	#"`nDisable Realtime monitoring:"
	#Get-MpPreference | Select DisableRealtimeMonitoring | Format-Table -Property * -AutoSize
    Get-MpPreference | Select DisableRealtimeMonitoring
    #"==================================================================================================="   

    #$RealTimeProtectionEnabled = (Get-MpComputerStatus | Select RealTimeProtectionEnabled)
    #if ( (($args[0] -eq 0) -and -not(RealTimeProtectionEnabled)) -or (($args[0] -eq 1) -and (RealTimeProtectionEnabled)) ) {        
    #    timeout 10
    #    exit
    #}
    #if ( (($args[0] -eq 1) -and -not(RealTimeProtectionEnabled)) -or (($args[0] -eq 0) -and (RealTimeProtectionEnabled)) ) {        
    #    Set-MpPreference -DisableRealtimeMonitoring -not(RealTimeProtectionEnabled)
    #}


    if ( ($enable -eq 0) -or ($enable -eq 1) ) {
        
        $result = (Get-MpComputerStatus | Select RealTimeProtectionEnabled)
        #$result.RealTimeProtectionEnabled     
        $RealTimeProtectionEnabled = $result.RealTimeProtectionEnabled
        #exit
        if ( ($enable -eq 1) -xor ($RealTimeProtectionEnabled) ) {
            #[bool]$NotOfRealTimeProtectionEnabled = ($RealTimeProtectionEnabled)
            Set-MpPreference -DisableRealtimeMonitoring $RealTimeProtectionEnabled
            "New choice applied"
            sleep 1
        } else {
            "Status in the requested state."
            timeout 5
            exit
        }
    } else {
        "==================================================================================================="
        "Press 0 to disable Realtime Monitoring and 1 to enable: "
        $key = [System.Console]::ReadKey()
        "`n"
        #date
        if (($key.Key -eq 'D0') -or ($key.Key -eq 'NumPad0')) {
            Set-MpPreference -DisableRealtimeMonitoring $true
        } elseif (($key.Key -eq 'D1') -or ($key.Key -eq 'NumPad1')) {
            Set-MpPreference -DisableRealtimeMonitoring $false
        } else {
        }    
        sleep 1
    }
}