Forum Discussion
sumo83
Jan 23, 2024Iron Contributor
Generated XML marked as Malicious File by Defender
Hello Experts, I've been dealing with an issue for months now and I guess I have finally found root cause of it... Trying to find solution now.. I have an XLSB file that has a macro inside an...
jbmartin6
Jan 23, 2024Iron Contributor
Look in other Defender logs for indications of if and why this file was removed. Notations like that in the timeline are just attempts by the tool to highlight things for an analyst to look at, they dont' indicate any specific action.
- sumo83Jan 23, 2024Iron ContributorI've just checked logs in Event Viewer > Applications and Services Logs > Microsoft > Windows > WindowsDefender > Operational..... and do not see anything related to generating XML....
😕- jbmartin6Jan 23, 2024Iron ContributorAre there associated FileDeleted events (or anything else relevant) in DeviceFileEvents?