Containment after upgrade

Products ITarian Endpoint Manager
1

Hi, I have noticed 2 programs below running in containment. please add these to the trusted list.

These are windows programs I didn’t see them getting blocked before the update…

C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.21.0_x64__8wekyb3d8bbwe\WinStore.App.exe C:\Users\James\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
2

we usually have an SLA that automatically turns any unknown into known within 24 hours…
if you come accross any executable that after 24 hours still unknown please let us know.
we are trying to reduce this to 4 hours SLA.

3

@dittoit Have you found any Windows MMCs being contained after the update ie services.msc?

4

Just tested my laptop, services, mmc and eventvwr OK.

5

Hi @nct ,

Thank you for reporting this case, we will further investigate this issue and we will get back to you as soon as possible through email.

6

The fault seemed to resolve itself whilst on to support.All ok now.
Ticket ref RUY-682-16630

7

Now a 2nd PC with the same/similar containment issue. I’m holding for L2 support.

8

We have analyzed the paths from Valkyrie repository and found out 2 different files. These two shouldn’t have any problem as we see. But to complete the analysis, we need the hashes (sha1 values) of both files. Can you please send these values?

9

@fatih who are you talking to ?

10

Hi @fatih Not exactly sure what information you require and L2 support is busy at the moment. Please send full instructions or call me. My phone number is on the ticket.

11

Support team

12

No, who do you want the information off? myself or @nct

13

Sorry for hijacking your post :slight_smile:

14

no bother :slight_smile: