Hi,
When I look in the web interface on the containtment I can see and even filter by some different types… I’m wondering what the difference is between “Contained Process” and “Containment Policy”?
Thanks =)
Hi,
When I look in the web interface on the containtment I can see and even filter by some different types… I’m wondering what the difference is between “Contained Process” and “Containment Policy”?
Thanks =)
Hello @Noiden ,
Containment policy means that some unrecognized file was launched in virtualized environment (Containment).
Contained process means that some unrecognized file which was launched in containment started some other file as a child process.
After that this other file will be Contained process.
I hope this information was helpful.
Kind Regards,
Jay