Jump to content

Recommended Posts

I am trying to lock down HIPS pretty tightly so I have set it to policy based mode. I've noticed that when I execute any application it logs that C:\Windows\System32\svchost.exe launches the application and HIPS lets it even though I don't have a rule to allow it. The logs indicate "some access blocked" for the action. What does this mean? It seems like it doesn't block it at all, so what access is it somewhat blocking? Also, how do I get it to outright block these type of actions?

Link to comment
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...