Forum Discussion
Solved
ASR - Behavior Changes - Blocking under User Context Now?
Since July 7-27-2022 I have been seeing around 40 of 1800 machines in my work environment that are showing blocks under %userprofile% or usercontext for .dll blocks. This is new behavior and is rece...
- I've so far only managed to check on one endpoint that was having the issue, However it's Security Intelligence Version updated to 1.373.383.0 this morning and it is no longer showing any symptoms of the problem. So early signs are encouraging that this may be fixed.
No information yet
In perusing various documents this article was updated today.
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/manage-updates-baselines-microsoft-defender-antivirus?view=o365-worldwide#monthly-platform-and-engine-versions
- so a platform update is incoming today/tomorrow for “patch Tuesday” .
- There is a comment that there are “improved” ways to exclude… not sure the specifics of what that means
- Another interesting thing is on the same page back in March there was a platform update that fixed Outlook Addins getting blocked in ASR.