Added note to ASR rule.

This commit is contained in:
Andrea Bichsel (Aquent LLC)
2018-11-19 19:02:55 +00:00
parent a1476c05a9
commit aca045a25e

View File

@ -158,6 +158,9 @@ Outlook will not be allowed to create child processes.
This is a typical malware behavior, especially for macro-based attacks that attempt to use Office apps to launch or download malicious executables.
>[!NOTE]
>This rule applies to Outlook only.
### Rule: Block Adobe Reader from creating child processes
This rule blocks Adobe Reader from creating child processes.