False Positive with endpoint

The defender for endpoint is blocking some of our files to be written to disc. This has started happening recently. The only way to send files to defender FP team is through this link: https://www.mi...

mikhailf

Iron Contributor

May 24, 2022

Hello sacjain ,

Have you tried to create an "Allow indicator" for the affected files?

Create indicators for files | Microsoft Docs

sacjain

Copper Contributor

May 24, 2022

Thanks for your reply mikhailf. My bad, i did not mention this earlier. The issue is being faced by one of our clients on his machine, so we cannot ask our client to use the exception list route by adding our files to the exception list or the Allow Indicator as you mentioned.

We would need to get the files whitelisted itself from our end and currently the only available mechanism is not working for us due to restricted access.

Any other suggestion is truly welcome and appreciated.

Thanks

Forum Discussion

False Positive with endpoint

Resources