Forum Discussion
Damir
Aug 21, 2022Brass Contributor
ASR question: AsrOfficeChildProcessBlocked
Hello, I have some questions about these rules and the best way to realistically handle them. We have been using Defender + ASR for about a year so we're mostly up to speed about how it works. ...
OludeleOgunrinde
Sep 07, 2022Microsoft
Question 1.
The Office files trying to launch a non-excluded process will be blocked by the AsrOfficeChildProcessBlocked. This will happen irrespective of whether the Office file in question arrives via email or is already present on the machine. Please create ASR submission for further analysis.
Question 2.
Please submit the blocked plug-ins using ASR submissions.
The Office files trying to launch a non-excluded process will be blocked by the AsrOfficeChildProcessBlocked. This will happen irrespective of whether the Office file in question arrives via email or is already present on the machine. Please create ASR submission for further analysis.
Question 2.
Please submit the blocked plug-ins using ASR submissions.
- DamirSep 07, 2022Brass ContributorWhere would I find the link/location to submit files for ASR omission or analysis for the plugins? Thank you!
- askvpbSep 08, 2022Brass ContributorCheck this link to submit files
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/defender-endpoint-false-positives-negatives?view=o365-worldwide#part-4-submit-a-file-for-analysis