Microsoft Sysmon can now block malicious EXEs from being created

Microsoft has released Sysmon 14 with a new ‘FileBlockExecutable’ option that lets you block the creation of malicious executables, such as EXE, DLL, and SYS files, for better protection against malware. […]

Go to Source
Author: Lawrence Abrams

You may also like...