Defender ASR rule blocked TotalLock.exe on encrypted USB flash drive

  • Thread starter Thread starter Martenos
  • Start date Start date
M

Martenos

Guest
Hi,We have ASR rules configured on MS Defender in company.Some users noticed that they can't use their hardware encrypted USB flash drives as when they try to run application to unlock drive (TotalLock.exe) nothing happens but in the logs you can see that ASR rule: Block untrusted or unsigned processes that run from USB blocked this application.When TotalLock.exe is opened from local drive instead of USB everything works fine.Can you help with this please?

Continue reading...
 
Back
Top