Tag Archives: AMSI

ASR rule “Block Win32 API calls from Office macros”

Posted on 2023-01-19 by Oliver

Microsoft says it’s fixed. It may be, but I think there’s more to it than meets the eye. Colleagues of mine noticed that, aside from shortcuts disappearing, Defender also started acting up on TortoiseProc.exe from TortoiseSVN. Notably, checkouts would fail … Continue reading →

Posted in Administration, EN, IT Security | Tagged , , | Leave a comment