Bitdefender GravityZone Setup

# PowerShell-Skript: Systemvorbereitung prüfen

# 1. Bestehende Antivirus-Software identifizieren
Get-WmiObject -Namespace "root\SecurityCenter2" -Class AntiVirusProduct | 
    Select-Object displayName, productState

# 2. Windows Defender Status prüfen
Get-MpComputerStatus | Select-Object AntivirusEnabled, RealTimeProtectionEnabled

# 3. Freien Speicherplatz prüfen
Get-WmiObject Win32_LogicalDisk | 
    Where-Object {$_.DriveType -eq 3} |
    Select-Object DeviceID, @{n="FreeGB";e={[math]::Round($_.FreeSpace/1GB,2)}}

# 4. .NET Version prüfen
Get-ChildItem 'HKLM:\SOFTWARE\Microsoft\NET Framework Setup\NDP\v4\Full\' | 
    Get-ItemPropertyValue -Name Release

# 5. Netzwerk-Konnektivität testen
Test-NetConnection -ComputerName "nimbus.bitdefender.net" -Port 443

# Download-Link aus der Console kopieren
# Format: https://download.bitdefender.com/SMB/.../setupdownloader_[COMPANY_ID].exe

# Oder via API:
curl -X GET "https://[CLOUD_URL]/api/v1.0/jsonrpc/push" \
  -H "Authorization: Basic [API_KEY]" \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "method": "getInstallationLinks",
    "params": { "packageName": "Windows-Default" },
    "id": 1
  }'

# MSI Silent Installation via GPO
# Erstellen Sie eine neue Computer-basierte GPO

# MSI-Pfad auf Share:
\\Server\Software$\Bitdefender\BEST.msi

# Parameter:
msiexec /i "\\Server\Software$\Bitdefender\BEST.msi" /qn \
  GZ_PACKAGE_ID="{PACKAGE_GUID}" \
  REBOOT=ReallySuppress \
  /l*v "C:\Logs\Bitdefender_Install.log"

# GPO Einstellungen:
# Computer Configuration → Policies → Software Settings → Software installation
# Paket hinzufügen → Zugewiesen → Computer

# Deployment auf mehrere Rechner via PowerShell
$computers = Get-Content "C:\Scripts\computers.txt"
$installerPath = "\\Server\Software$\Bitdefender\setupdownloader.exe"

foreach ($computer in $computers) {
    Write-Host "Deploying to $computer..." -ForegroundColor Cyan
    
    Invoke-Command -ComputerName $computer -ScriptBlock {
        param($path)
        
        # Installer kopieren
        Copy-Item $path -Destination "C:\Temp\bd_installer.exe" -Force
        
        # Silent Installation
        Start-Process -FilePath "C:\Temp\bd_installer.exe" \
            -ArgumentList "/silent" -Wait
        
        # Cleanup
        Remove-Item "C:\Temp\bd_installer.exe" -Force
        
    } -ArgumentList $installerPath
    
    Write-Host "$computer completed" -ForegroundColor Green
}

# Typische Ausnahmen für Business-Umgebungen

# Entwicklungsverzeichnisse
C:\Development\*
C:\Users\*\AppData\Local\JetBrains\*

# Datenbank-Verzeichnisse
C:\Program Files\Microsoft SQL Server\*
C:\Program Files\PostgreSQL\*

# Backup-Software
C:\Program Files\Veeam\*

# Virtuelle Maschinen
C:\Users\*\VirtualBox VMs\*
C:\ProgramData\Microsoft\Windows\Hyper-V\*

# Spezifische Prozesse
outlook.exe - E-Mail Scanning Exclusion
sqlservr.exe - SQL Server Process

# PowerShell: Bitdefender-Dienste prüfen
Get-Service -Name "EPSecurityService", "EPUpdateService", "EPIntegrationService" | 
    Format-Table Name, Status, StartType

# Agent-Version prüfen
$agentPath = "C:\Program Files\Bitdefender\Endpoint Security"
if (Test-Path $agentPath) {
    Get-ChildItem "$agentPath\product.exe" | 
        ForEach-Object { $_.VersionInfo.ProductVersion }
}

# Schutz-Status prüfen
$wmiQuery = "SELECT * FROM Win32_Product WHERE Name LIKE '%Bitdefender%'"
Get-WmiObject -Query $wmiQuery | Select-Object Name, Version

# Letztes Update prüfen
Get-Content "C:\ProgramData\Bitdefender\Endpoint Security\Logs\update.log" -Tail 20