admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
gitlab_release_testing_2
splunk-security_content/lookups/loldrivers.csv
T
Michael Haag 3642d36c7f Bespoke Drivers
2022-12-31 14:14:11 -07:00

251 lines
28 KiB
CSV
Raw Permalink Blame History

driver_name,driver_description,is_driver
*\ADV64DRV.sys,https://github.com/namazso/physmem_drivers,TRUE
*\Agent64.sys,https://github.com/namazso/physmem_drivers,TRUE
*\ALSysIO64.sys,https://github.com/namazso/physmem_drivers,TRUE
*\amifldrv64.sys,https://github.com/namazso/physmem_drivers,TRUE
*\AsIO.sys,https://github.com/namazso/physmem_drivers,TRUE
*\AsIO64.sys,https://github.com/namazso/physmem_drivers,TRUE
*\asmmap64.sys,https://github.com/namazso/physmem_drivers,TRUE
*\AsrAutoChkUpdDrv.sys,https://github.com/namazso/physmem_drivers,TRUE
*\AsrDrv10.sys,https://github.com/namazso/physmem_drivers,TRUE
*\AsrDrv101.sys,https://github.com/namazso/physmem_drivers,TRUE
*\AsrIbDrv.sys,https://github.com/namazso/physmem_drivers,TRUE
*\AsrOmgDrv.sys,https://github.com/namazso/physmem_drivers,TRUE
*\AsrRapidStartDrv.sys,https://github.com/namazso/physmem_drivers,TRUE
*\AsrSmartConnectDrv.sys,https://github.com/namazso/physmem_drivers,TRUE
*\AsUpIO.sys,https://github.com/namazso/physmem_drivers,TRUE
*\atillk64.sys,https://github.com/namazso/physmem_drivers,TRUE
*\BS_Def64.sys,https://github.com/namazso/physmem_drivers,TRUE
*\CITMDRV_AMD64.sys,https://github.com/namazso/physmem_drivers,TRUE
*\CITMDRV_IA64.sys,https://github.com/namazso/physmem_drivers,TRUE
*\cpuz_x64.sys,https://github.com/namazso/physmem_drivers,TRUE
*\cpuz141.sys,https://github.com/namazso/physmem_drivers,TRUE
*\dbutil_2_3.sys,https://github.com/namazso/physmem_drivers,TRUE
*\Dh_Kernel_10.sys,https://github.com/namazso/physmem_drivers,TRUE
*\Dh_Kernel.sys,https://github.com/namazso/physmem_drivers,TRUE
*\gdrv.sys,https://github.com/namazso/physmem_drivers,TRUE
*\GLCKIO2.sys,https://github.com/namazso/physmem_drivers,TRUE
*\HOSTNT.sys,https://github.com/namazso/physmem_drivers,TRUE
*\HwRwDrv.sys,https://github.com/namazso/physmem_drivers,TRUE
*\inpoutx64.sys,https://github.com/namazso/physmem_drivers,TRUE
*\iomem64.sys,https://github.com/namazso/physmem_drivers,TRUE
*\Mhyprot2.sys,https://github.com/namazso/physmem_drivers,TRUE
*\MsIo64.sys,https://github.com/namazso/physmem_drivers,TRUE
*\msrhook.sys,https://github.com/namazso/physmem_drivers,TRUE
*\NTIOLib.sys,https://github.com/namazso/physmem_drivers,TRUE
*\OpenLibSys.sys,https://github.com/namazso/physmem_drivers,TRUE
*\Se64a.sys,https://github.com/namazso/physmem_drivers,TRUE
*\smep_capcom.sys,https://github.com/namazso/physmem_drivers,TRUE
*\smep_namco.sys,https://github.com/namazso/physmem_drivers,TRUE
*\SysInfo.sys,https://github.com/namazso/physmem_drivers,TRUE
*\VProEventMonitor.sys,https://github.com/namazso/physmem_drivers,TRUE
*\WCPU.sys,https://github.com/namazso/physmem_drivers,TRUE
*\WINIODrv.sys,https://github.com/namazso/physmem_drivers,TRUE
*\WinRing0.sys,https://github.com/namazso/physmem_drivers,TRUE
*\physmem.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\procexp152.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\viraglt64.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\vboxdrv.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\rwdrv.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\speedfan.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\kprocesshacker.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\sandra.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\elbycdio.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\goad.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\aswsnx.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\sandbox.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\nicm.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\nscm.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\ncpl.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\elrawdsk.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\DBUtilDrv2.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\BS_RCIO64.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\mhyprot.sys,https://github.com/jbaines-r7/dellicious and https://www.rapid7.com/blog/post/2021/12/13/driver-based-attacks-past-and-present/,TRUE
*\EneTechIo64.sys,https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c,TRUE
*\amp.sys,https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c,TRUE
*\EneIo64.sys,https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c,TRUE
*\ATSZIO.sys,https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c,TRUE
*\NalDrv.sys,https://gist.github.com/k4nfr3/af970e7facb09195e56f2112e1c9549c,TRUE
*\DirectIo32.sys,https://github.com/eset/vulnerability-disclosures/blob/master/CVE-2020-15480/CVE-2020-15480.md,TRUE
*\DirectIo64.sys,https://github.com/eset/vulnerability-disclosures/blob/master/CVE-2020-15480/CVE-2020-15480.md,TRUE
*\AsUpIO64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\AsrDrv102.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\AsrDrv103.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\BSMEMx64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\BSMIXP64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\BSMIx64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\BS_Flash64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\BS_HWMIO64_W10.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\BS_HWMIo64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\BS_I2c64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\GVCIDrv64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\HwOs2Ec10x64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\HwOs2Ec7x64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\NBIOLib_X64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\NCHGBIOS2x64.SYS,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\NTIOLib_X64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\PhlashNT.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\Phymemx64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\UCOREW64.SYS,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\WinFlash64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\WinRing0x64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\dbk64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\mtcBSv64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\nvflash.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\nvflsh64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\phymem64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\rtkio64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\rtkiow10x64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\rtkiow8x64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\segwindrvx64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\superbmc.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\semav6msr.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\piddrv64.sys,https://github.com/eclypsium/Screwed-Drivers/blob/master/DRIVERS.md,TRUE
*\BS_I2cIo.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\rtkio.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\AMDRyzenMasterDriver.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\LHA.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\kEvP64.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\BSMI.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\TmComm.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\cpuz.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\iQVW64.SYS,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\vmdrv.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\HpPortIox64.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\AMDPowerProfiler.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\CorsairLLAccess64.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\RTCore64.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\libnicm.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\procexp.Sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\viragt.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\viragt64.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\AsrDrv106.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\zamguard64.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\zam64.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\fidpcidrv64.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\MsIo32.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\winio64.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\capcom.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\IOMap64.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\ATSZIO64.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\aswVmm.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\FairplayKD.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\pgldqpoc.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\iqvw64e.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\Monitor_win10_x64.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\srvnetbus.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\Mslo64.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\pcdsrvc_x64.pkms,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\krpocesshacker.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\HWiNFO64A.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\rzpnk.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\magdrvamd64.sys,https://github.com/elastic/protections-artifacts/search?q=VulnDriver,TRUE
*\driver7-x64.sys,https://github.com/Chigusa0w0/AsusDriversPrivEscala,TRUE
*\driver7-x86-withoutdbg.sys,https://github.com/Chigusa0w0/AsusDriversPrivEscala,TRUE
*\driver7-x86.sys,https://github.com/Chigusa0w0/AsusDriversPrivEscala,TRUE
*\gmer.sys,https://raw.githubusercontent.com/SigmaHQ/sigma/master/rules/windows/driver_load/driver_load_vuln_drivers_names.yml,TRUE
*\PCADRVX64.sys,https://raw.githubusercontent.com/SigmaHQ/sigma/master/rules/windows/driver_load/driver_load_vuln_drivers_names.yml,TRUE
*\clfs.sys,https://raw.githubusercontent.com/SigmaHQ/sigma/master/rules/windows/driver_load/driver_load_vuln_drivers_names.yml,TRUE
*\ActiveHealth.sys,https://eclypsium.com/2019/11/12/mother-of-all-drivers/,TRUE
*\CAM_V3.sys,https://eclypsium.com/2019/11/12/mother-of-all-drivers/,TRUE
*\GameFire.sys,https://eclypsium.com/2019/11/12/mother-of-all-drivers/,TRUE
*\OpenHardwareMonitor.sys,https://eclypsium.com/2019/11/12/mother-of-all-drivers/,TRUE
*\OpenHardwareMonitorLib.sys,https://eclypsium.com/2019/11/12/mother-of-all-drivers/,TRUE
*\OpenHardwareMonitorReport.sys,https://eclypsium.com/2019/11/12/mother-of-all-drivers/,TRUE
*\SmartDashboard.sys,https://eclypsium.com/2019/11/12/mother-of-all-drivers/,TRUE
*\SystemGauge.sys,https://eclypsium.com/2019/11/12/mother-of-all-drivers/,TRUE
*\SystemGaugeX7.sys,https://eclypsium.com/2019/11/12/mother-of-all-drivers/,TRUE
*\VideoNovaServerControllerService.sys,https://eclypsium.com/2019/11/12/mother-of-all-drivers/,TRUE
*\ellp_service.sys,https://eclypsium.com/2019/11/12/mother-of-all-drivers/,TRUE
*\hardwareproviders.sys,https://eclypsium.com/2019/11/12/mother-of-all-drivers/,TRUE
*\ohm.sys,https://eclypsium.com/2019/11/12/mother-of-all-drivers/,TRUE
*\sensorsview32_64.sys,https://eclypsium.com/2019/11/12/mother-of-all-drivers/,TRUE
*\touchpointanalyticsclient.sys,https://eclypsium.com/2019/11/12/mother-of-all-drivers/,TRUE
*\ASIO32.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\asrdrv104.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\AsrSetupDrv103.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\bandai.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\dbutil.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\fiddrv.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\fiddrv64.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\fidpcidrv.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\DirectIo.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\hw_sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\mhyprot3.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\MsIo.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\otipcibus.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\piddrv.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\semav6msr64.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\80.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\netfilterdrv.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\81.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\full.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\nstrwsk.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\nt2.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\nt3.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\nt5.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\b4.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\bw.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\bwrs.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\bwrsh.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\TGSafe.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\BlackBoneDrv10.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\LgDCatcher.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\gameink.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\windows-xp-64.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\windows8-10-32.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\kbdcap64.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\d3.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\d.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\b3.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\2.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\b1.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\My.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\Black.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\WYProxy32.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\WYProxy64.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\Proxy64.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\ni.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\d4.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\d2.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\t.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\1.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\cpupress.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\gameink.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\NetFlt.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\ProtectS.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\GameTerSafe.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\Lurker.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\TestBone.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\Proxy32.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\t7.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\nt4.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\t8.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\nstr.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\nt6.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\t3.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\windows7-32.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\NetProxyDriver.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\c.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\b.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\full.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\WinIo64A.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\WinIo64B.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\WinIO32B.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\WinIO32.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\WinIO32A.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\WinIo64C.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\PCHunter.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\aswArPot.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\Bs_Def.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\BS_RCIO.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\IObitUnlocker.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\LenovoDiagnosticsDriver.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\Lv561av.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\Monitor.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\mydrivers.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\PanIOx64.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\PanIO.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\PanMonFltX64.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\PanMonFlt.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
*\WiseUnlo.sys,https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/microsoft-recommended-driver-block-rules,TRUE
Reference in New Issue View Git Blame Copy Permalink