Exception for publisher ASR rule RRS feed

  • Question

  • We have an application that receives periodic updates via an auto-update process. In audit mode it is being flagged under the "Block executable files from running unless they meet..." rule  The file that is being run is signed by the publisher so I was hoping there is a way that we could exclude the publisher from this asr rule?

    I do not want to exclude the directory that it installs from since it downloads and expands to the the users temp folder. 

    Tuesday, September 8, 2020 5:22 PM