Added Update-ExploitProtectionSettings.ps1

Update-ExploitProtectionSettings.ps1

@@ -0,0 +1,35 @@
+$guid = New-Guid
+$dest_dir = "$env:programfiles"
+$file_url = "https://raw.githubusercontent.com/jdgregson/Windows-10-Exploit-Protection-Settings/master/ExploitProtectionSettings.xml"
+$file_path = "$dest_dir\ExploitProtectionSettings-$guid.xml"
+
+try {
+    "test" > "$dest_dir\test.$guid"
+    Remove-Item "$dest_dir\test.$guid"
+} catch {
+    Write-Warning "Could not write to `"$dest_dir`". Are you running this as an administrator?"
+    Write-Host "No changes were made."
+    Exit
+}
+
+Write-Host "Downloading new settings XML..." -NoNewline
+Invoke-WebRequest -Uri $file_url -OutFile $file_path
+if (Test-Path $file_path) {
+    Write-Host "DONE" -ForegroundColor "DarkGreen"
+    Write-Host "Verifying new settings XML..." -NoNewline
+    if ((Set-ProcessMitigation -PolicyFilePath $file_path -IsValid) -eq "Is Valid XML: True") {
+        Write-Host "DONE" -ForegroundColor "DarkGreen"
+        Write-Host "Applying new settings XML..." -NoNewline
+        Set-ProcessMitigation -PolicyFilePath $file_path
+        Write-Host "DONE" -ForegroundColor "DarkGreen"
+        Remove-Item $file_path
+    } else {
+        Write-Host "FAIL" -ForegroundColor "DarkRed"
+        Write-Warning "$file_path is not valid."
+        Write-Host "No changes were made."
+    }
+} else {
+    Write-Host "FAIL" -ForegroundColor "DarkRed"
+    Write-Warning "The XML file was not found after download."
+    Write-Host "No changes were made."
+}