From fc57f2b8a93e9b7e5a62c17e0f3b809cb1009259 Mon Sep 17 00:00:00 2001 From: Violet Hansen Date: Mon, 4 Nov 2024 15:45:46 +0200 Subject: [PATCH] Update ProcessMitigations.csv --- .../Main files/Resources/ProcessMitigations.csv | 2 -- 1 file changed, 2 deletions(-) diff --git a/Harden-Windows-Security Module/Main files/Resources/ProcessMitigations.csv b/Harden-Windows-Security Module/Main files/Resources/ProcessMitigations.csv index 02176fe8b..26cbcbfa9 100644 --- a/Harden-Windows-Security Module/Main files/Resources/ProcessMitigations.csv +++ b/Harden-Windows-Security Module/Main files/Resources/ProcessMitigations.csv @@ -142,8 +142,6 @@ rundll32.exe,BlockLowLabelImageLoads,Enable,True,Prevent loading of files that a SMSS.exe,BlockRemoteImageLoads,Enable,True,Protecting PPL process to prevent loading of DLLs from network locations such as SMB - WebDAV - etc. - It's called Session Manager SubSystem Wininit.exe,BlockRemoteImageLoads,Enable,True,Protecting PPL process to prevent loading of DLLs from network locations such as SMB - WebDAV - etc. - It stands for Windows Initialization and is a process that is responsible for starting and terminating system services and processes during startup and shutdown NisSrv.exe,MicrosoftSignedOnly,Enable,True,Protecting PPL process to prevent loading Non-Microsoft signed code into the process - This is a component of Microsoft Defender called Network Inspection Service -AppControlManager.exe,StrictHandle,Enable,True,AppControl Manager hardening -AppControlManager.exe,DisableExtensionPoints,Enable,True,AppControl Manager hardening AppControlManager.exe,DisableNonSystemFonts,Enable,True,AppControl Manager hardening AppControlManager.exe,BlockRemoteImageLoads,Enable,True,AppControl Manager hardening AppControlManager.exe,BlockLowLabelImageLoads,Enable,True,AppControl Manager hardening