Gashire 0 Posted March 24, 2014 Share Posted March 24, 2014 I am trying to lock down HIPS pretty tightly so I have set it to policy based mode. I've noticed that when I execute any application it logs that C:\Windows\System32\svchost.exe launches the application and HIPS lets it even though I don't have a rule to allow it. The logs indicate "some access blocked" for the action. What does this mean? It seems like it doesn't block it at all, so what access is it somewhat blocking? Also, how do I get it to outright block these type of actions? Link to comment Share on other sites More sharing options...
Recommended Posts