Reply to thread

Message: <blockquote data-quote="Andrezj" data-source="post: 1015335" data-attributes="member: 97580">microsoft runs teams from user appdata, that is against microsoft's own recommendation not to run an application from user spaceonedrive runs from appdata toontfs permissons grant user to write to their teams profileteams appdata folder can be added to controlled folder access to prevent writes, then you create teams processes exclusion in controlled folders to write to teams profilesince you are running srp there is little chance malware will run and compromise teams directoryyou do not need to whitelist entire teams directory, you whitelist only the full path to the teams processes that must run, this method blocks any malware that might get written to the teams directorybut your combo with osarmor is a good one</blockquote>

Top