Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
The rule of thumb is to ONLY use exclusions that you necessary need in your environment, there is no universal list. In other words if there is no issue in your environment don't use any. Think of it as each exclusions you throw in is potential hole...
Unfortunately you DT picture is extremely small but from what I can tell the issue is not with the process aka SwCAScanner.exe because the SHA256 in your picture is green, which means that this file is not malicious and allowed. What seems to be mal...
Again not helpful at all. I was asking to provide information in form of screenshot that will show the event in your endpoint console with all the details which will identify more precisely what engine is responsible for the detection. There are many...
Glad that we are now on same page.
As far for you proposal I completely get the point and trust me you are not the only one who made that mistake and probably not the last one. For me from the security stand point ... I'm more of "Balanced Model" g...
