Harmony Endpoint blocking Microsoft Files

[John_Richards]

A customer has noticed a large number of blocks just within a 24 hour period (See attached). All blocks appear to be related to Microsoft and could be false positives. This impacts multiple system in the environment. Not sure if I want to start creating exclusions for all these. I have checked other customer sites and have not seen anything like this. Any ideas on why these MS files would be flagged? Does an exception need to be created? Thanks

[the_rock]

Thats what sounds most logical, unless TAC may have better suggestion.

Best,

Andy

[Swiftyyyy]

We got the same, a bunch of dlls in C:\Windows\
I seriously hope this doesn't impact the operation of these systems. Really not the best present to get for the holidays.

I'll be opening a case with TAC and brace for all our customer calls 🙂
If you find anything out yourself, please do let us know.