Jump to content

mangu

Members
  • Content Count

    1
  • Joined

  • Last visited

Community Reputation

0 Neutral

About mangu

  • Rank
    New Member
  1. Hello , I have created a dummy file with extension of ".dat" on my Desktop(windows 8) .After some time it was detected as a alert with below status "Blocked by Access Protection rule" in my arc sight console.when i observed the file path it was shown as c://windows/explorer.exe with file name as "C:\TEMP\test.dat\".and for the same file it was shown one more alert under the below process "C:\WINDOWS\SYSTEM32\DLLHOST.EXE".Can i have any suggestion why file path is showing as temp file instead of desktop. i got to know that access protection rule was written in such way it should block
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.