Forum Discussion

PLivingston11's avatar
PLivingston11
Copper Contributor
Sep 17, 2023

ASR Rule issue

Hi,   We have enabled ASR rules using SCCM but 'block credential stealing from the windows local security authority subsystem (lsass.exe)' shows as not applicable. Any ideas why?       Th...
microsoft defender for endpoint
BillClarksonAntill's avatar
BillClarksonAntill
Iron Contributor
What version of Windows are you using, not all versions of windows OS are compatible
PLivingston11's avatar
PLivingston11
Copper Contributor
Sep 18, 2023
Hi Bill,

We are using 22h2, fully patched.

Resources