Open AaronHorn opened 6 months ago
@AaronHorn Can you try to install the tool via winget
?
@AaronHorn Can you try to install the tool via
winget
?
I tried this, it seems to work.
However the version Go installed also now seems to work, even with the ASR exclusions removed.
I've just installed aztfexport using
go install github.com/Azure/aztfexport@latest
When I try to run the binary, it is being blocked by Microsoft Defender's Attack Surface Reduction (ASR) rules.
In event log:
In Windows Security:
Defender log file: MPLog.log
The problem is because I have the ASR rule "Block executable files from running unless they meet a prevalence, age, or trusted list criterion" 01443614-cd74-433a-b99e-2ecdc07bfc25 (https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction-rules-reference?view=o365-worldwide#block-executable-files-from-running-unless-they-meet-a-prevalence-age-or-trusted-list-criterion) set.
Fix is
But is there anything that can be done from the project side to prevent this happening?