Forum Discussion
Block malware filehash values using applocker
Hi All, is there a way we can block malware filehash values using Applocker GPO without having to locate or have a actual copy of the malware file ? appreciate your response... cheers..
AppLocker is NOT a replacement for Anti-Malware product and to set a policy, you will need to have a sample of it.
However, you may do it other way, like create a whitelist and only add trusted applications and place the rest into black list, so it will block everything else.
In case it is a malware, you may report it to Microsoft Anti-Malware team to create a signature. You may upload it to websites where they product hash key.
However, you may do it other way, like create a whitelist and only add trusted applications and place the rest into black list, so it will block everything else.
In case it is a malware, you may report it to Microsoft Anti-Malware team to create a signature. You may upload it to websites where they product hash key.
Thanks Reza_Ameri.
- Welcome, glad it was helpful