Thanks Thorsten for the details. Appreciate it. Example : "HostMachine detected but did not block (Audit mode) access to lsass.exe by MicrosoftDependencyAgent.exe" To be more clear, if I have to Whitelist the Microsoft DependencyAgent, I did a right ...