Forum Discussion

marka01's avatar
marka01
Copper Contributor
Jan 13, 2022

Block persistence through WMI event subscription

'GUID: e6db77e5-3df2-4cf1-b95a-636979351e5b' is not available under AD Group Policy (Windows components > Microsoft Defender Antivirus > Microsoft Defender Exploit Guard > Attack surface reduction).

Is it a case of just adding entry myself or do you actually need to promote DC functional level (current is 2008 r2)?

No RepliesBe the first to reply

Resources