Anti-Ransomware and Behavioral Guard Settings Question

David_Levine — Tue, 30 Jun 2020 18:51:20 GMT

I am looking at the Anti-Ransomware and Behavioral Guard settings in our endpoint security policy, and noticed that there is an exclusion for C:\Windows\explorer.exe (process) along with a handful of certificate based exclusions for Symantec, TrendMicro, etc.

I don't come in here to mess with this policy setting, but I seem to recall that the certificate based exclusions are normal "out of the box" settings. I don't recall that an exclusion for the Explorer.exe process is a default though? Can anyone confirm if it is?

Thanks,

Re: Anti-Ransomware and Behavioral Guard Settings Question

Roman_Zitzev — Wed, 01 Jul 2020 09:33:01 GMT

explorer is exclude from Anti-Ransomware and Behavioral-Guard component.

if any additional help needed let know.

romanzit@checkpoitn.com

roman

topic Re: Anti-Ransomware and Behavioral Guard Settings Question in Endpoint

Anti-Ransomware and Behavioral Guard Settings Question

Re: Anti-Ransomware and Behavioral Guard Settings Question