Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 993763" data-attributes="member: 32260">I have just finished a quick test of Smart App Control on Windows 11 (Insider). It is much more useful than I thought.After downloading 30 fresh applications from Softpedia it gave slightly fewer false positives compared to Norton 360, Windows SmartScreen, or Defender ASR prevalence rule.I compiled a fresh &amp; unsigned version of ConfigureDefender to see what will happen:[ATTACH=full]267619[/ATTACH]In my test, the digitally signed applications were installed &amp; run without issues (except for two events). A few installations were blocked (some were partially blocked).:[ATTACH=full]267621[/ATTACH]The cons (for some people) can be that the blocked installer or application cannot be allowed/whitelisted/excluded by the user. It can be only submitted to Microsoft as a false positive in the Smart App Control category. For now, Smart App Control cannot be temporarily turned off.It would be interesting to test Defender + Smart App Control in Malware Hub.</blockquote>

[QUOTE="Andy Ful, post: 993763, member: 32260"] I have just finished a quick test of Smart App Control on Windows 11 (Insider). It is much more useful than I thought. After downloading 30 fresh applications from Softpedia it gave slightly fewer false positives compared to Norton 360, Windows SmartScreen, or Defender ASR prevalence rule. I compiled a fresh & unsigned version of ConfigureDefender to see what will happen: [ATTACH type="full" alt="1655766985519.png"]267619[/ATTACH] In my test, the digitally signed applications were installed & run without issues (except for two events). A few installations were blocked (some were partially blocked).: [ATTACH type="full" alt="1655767201898.png"]267621[/ATTACH] The cons (for some people) can be that the blocked installer or application cannot be allowed/whitelisted/excluded by the user. It can be only submitted to Microsoft as a false positive in the Smart App Control category. For now, Smart App Control cannot be temporarily turned off. It would be interesting to test Defender + Smart App Control in Malware Hub. [/QUOTE]

Verification