Forum Discussion
Smart App Control block logs
I have recently started receiving constant messages from Defender about Smart APp control blocking a "cer.mst" file, but I can't find the logs or protection history related to it. Doing a broad searc...
Hi Carles, Smart App Control events can be hard to spot in the normal Defender history view. I would check Event Viewer under Microsoft, Windows, AppLocker and CodeIntegrity, then inspect the cer.mst file location and signature. If you do not recognize the file, upload it to Microsoft Defender or remove it only after confirming what installed it.