I have a few for you:
- AsrExecutableEmailContentAudited / Block executable content from email client and webmail
- AsrExecutableOfficeContentAudited / Block Office applications from creating executable content
- AsrPsexecWmiChildProcessAudited / Block process creations originating from PSExec and WMI commands
- AsrOfficeMacroWin32ApiCallsAudited / Block Office communication application from creating child processes
- AsrObfuscatedScriptAudited / Block execution of potentially obfuscated scripts
- AsrOfficeChildProcessAudited / Block Office communication application from creating child processes
- AsrAdobeReaderChildProcessAudited / Block Adobe Reader from creating child processes
We support Ukraine and condemn war. Push Russian government to act against war. Be brave, vocal and show your support to Ukraine. Follow the latest news HERE