Reply to thread

[USER=37647]@shmu26[/USER],


These exclusions are applied only when the user enables the ASR rule "Block executable files from running unless they meet a prevalence, age, or trusted list criteria", to avoid blocking the native image DLLs.  The native image DLLs can be blocked by this ASR rule, because they are not delivered by Microsoft, but created locally on the computer. There is no documentation about it, just my deduction.(y)


About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top