Forum Discussion
Ammar Hasayen
May 31, 2019Iron Contributor
Microsoft Defender ATP [Attack Simulation & Investigation] Demos
Hi Community,
If you are new to Microsoft Defender ATP or want to see a series of demos on how the product can help your organization, check out this:
Demo 1/6 - MS Defender ATP - On-b...
Chuck99
Sep 06, 2019Brass Contributor
Ammar Hasayen thank for the info! However, we are facing an issue when running the Simulation #1 when opening the docm file in Word. AMSI is getting in the way. We did "unblock" the file from the properties of the document and even allowed all macros from the Trust Center.
Any idea how to pass that AMSI security message and finalize the simulation?
Thanks!
Charles
- Ammar HasayenSep 17, 2019Iron Contributor
Chuck99 thanks for your feedback.
Im my demo, I am using the latest Windows 10 machine that is not joined tot he domain and does not have any thing installed on it but Office to open the document. I am not sure I did anything special to make that work.