Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1053558" data-attributes="member: 32260">WindowsHybridHardening Light ver. 1.0.0.0.:[URL unfurl=&quot;true&quot;]https://github.com/AndyFul/Hard_Configurator/raw/master/Simple%20Windows%20Hardening/WHHLight_Package_1000.exe[/URL]This is the first version, so it is recommendable to run the application on the Virtual Machine.Problems can arise from the AVs, which can tamper with WHH Light. For example, before submitting false positives, Microsoft Defender detected WHH as the malware (3 different behavior-based detections). After my submission, the detections were removed, but the application was still blocked by ASR rules.Currently (after some negotiations with Microsoft) the application is accepted by:<ul>
<li data-xf-list-type="ul">SmartScreen and PUA protection (in Edge and Defender),</li>
<li data-xf-list-type="ul">Smart App Control,</li>
<li data-xf-list-type="ul">ASR rules (except a single rule related to running from USB).</li>
</ul></blockquote>

[QUOTE="Andy Ful, post: 1053558, member: 32260"] [B][SIZE=5]WindowsHybridHardening Light ver. 1.0.0.0.:[/SIZE][/B] [URL unfurl="true"]https://github.com/AndyFul/Hard_Configurator/raw/master/Simple%20Windows%20Hardening/WHHLight_Package_1000.exe[/URL] [COLOR=rgb(184, 49, 47)]This is the first version, so it is recommendable to run the application on the Virtual Machine.[/COLOR] Problems can arise from the AVs, which can tamper with WHH Light. For example, before submitting false positives, Microsoft Defender detected WHH as the malware (3 different behavior-based detections). After my submission, the detections were removed, but the application was still blocked by ASR rules. Currently (after some negotiations with Microsoft) the application is accepted by: [LIST] [*]SmartScreen and PUA protection (in Edge and Defender), [*]Smart App Control, [*]ASR rules (except a single rule related to running from USB). [/LIST] [/QUOTE]

Verification