Which rule type should be used to ensure that files of the same name and path, written by that process in the future, will not be blocked when they execute?

A process wrote an executable file as detailed in the following event:

Which rule type should be used to ensure that files of the same name and path, written by that process in the future, will not be blocked when they execute?
A . Trusted Path
B . File Creation Control
C . Advances (Write-Ignore)
D . Trusted Publisher

Answer: B

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments