Hi,
I'm looking for some assistance please. Earlier this year one of our customers had a security breach and when we spoke to ESET support they recommended we take a look at the following article and follow its steps to configure HIPS rules to protect against ransomeware:
https://support.eset.com/kb6119/?locale=en_US&viewlocale=en_US
My issue is that now within ESET Remote Administrator, we sometimes get 20-100 alerts on lots of devices, usually:
' HIPS - Start new application - 'Computer Name' - Deny child processes for powershell.exe - blocked - C:\WINDOWS\System32\Conhost.exe'
Is there a way to stop these alerts being generated? It can take quite a while to clear them all every day.
Thanks,
Rob
