Contained by.... differences?

Hi,

When I look in the web interface on the containtment I can see and even filter by some different types… I’m wondering what the difference is between “Contained Process” and “Containment Policy”?

Thanks =)

Hello @Noiden ,

Containment policy means that some unrecognized file was launched in virtualized environment (Containment).
Contained process means that some unrecognized file which was launched in containment started some other file as a child process.
After that this other file will be Contained process.

I hope this information was helpful.

Kind Regards,
Jay