Reply to thread

Message

<blockquote data-quote="ForgottenSeer 97327" data-source="post: 1025586">I had simular experience with ISG (intelligent Security Graph of WDAC). I used to test my WDAC config being active with an unsigned applicatiion. This worked from 2019 until end 2022. When I was updating an image with WDAC ISG with Bitdefender Free and another image with WDAC ISG combined with AVAST Free. All of a sudden ISG allowed the unsigned app, first I thought that my WDAC ran in audit mode, but ISG had whitelisted the unsigned app while I was updating my images.I read somewhere that Smartscreen, ISG and SAC share (parts) of the same cloud whitelist backbone. So ISG seems to benefit from SAC. This made me think that Microsoft is really trying to make SAC work for general use. Your experience is another example that Microsoft is preparing SAC for a broad audience rollout.&nbsp; <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" /></blockquote>

[QUOTE="ForgottenSeer 97327, post: 1025586"] I had simular experience with ISG (intelligent Security Graph of WDAC). I used to test my WDAC config being active with an unsigned applicatiion. This worked from 2019 until end 2022. When I was updating an image with WDAC ISG with Bitdefender Free and another image with WDAC ISG combined with AVAST Free. All of a sudden ISG allowed the unsigned app, first I thought that my WDAC ran in audit mode, but ISG had whitelisted the unsigned app while I was updating my images. I read somewhere that Smartscreen, ISG and SAC share (parts) of the same cloud whitelist backbone. So ISG seems to benefit from SAC. This made me think that Microsoft is really trying to make SAC work for general use. Your experience is another example that Microsoft is preparing SAC for a broad audience rollout. (y) [/QUOTE]

Verification